The worm will connect first to port 8080, and if necessary using SSL, to request the “/HNAP1/” URL